encrypted messaging Archives

AppWizard

August 9, 2026

Organized crime is using encrypted messaging apps to enlist youth. This spells trouble for police

Toronto has seen an increase in gunfire incidents aimed at the U.S. consulate, leading to the arrests of a 19-year-old and a 15-year-old. These incidents are linked to alleged gun-for-hire plots that also target Jewish schools, synagogues, and waste management facilities in the Greater Toronto Area. Investigators are facing difficulties in identifying the masterminds behind these operations, partly due to the use of encrypted messaging apps to recruit young individuals. The federal government's Bill C-22 aims to provide law enforcement with tools to address these challenges, but it has faced criticism for potential overreach and privacy concerns. Police Chief Myron Demkiw emphasized the need for effective tools to prevent violence facilitated through encrypted communication. Technology analyst Carmi Levy raised concerns about balancing law enforcement needs with privacy rights. Additionally, there is a societal responsibility to protect children from online recruitment by criminal networks, with calls for proactive conversations between parents and children and educational initiatives in schools.

AppWizard

August 7, 2026

The offline messaging apps challenging internet shutdowns

Governments are finding it harder to suppress protests through internet shutdowns due to the use of offline messaging applications. Bitchat, an app launched in 2025 by Jack Dorsey, allows devices to communicate via Bluetooth without internet access and gained popularity during recent student protests in New Delhi amid an internet blackout. The Indian government attempted to block access to Bitchat's source code on GitHub, marking a notable first instance of trying to geoblock an open-source repository. On July 26, Bitchat had 430,000 daily active users in India, with 74% of global downloads occurring in the country from July 20 to July 26. The app has been used in various protests globally, including those in Hong Kong, Myanmar, Nepal, Uganda, Madagascar, and Iran. On July 23, the Indian government ordered GitHub to disable access to three Bitchat repositories in India quickly. Jack Dorsey expressed concerns about the Indian government's stance on Bitchat, while digital rights advocates criticized the government's actions as unnecessary. The repositories remained accessible in India and were mirrored on decentralized platforms, complicating removal efforts. India's government has increasingly scrutinized communication platforms based on their design, imposing restrictions on apps like Telegram and WhatsApp.

AppWizard

July 30, 2026

Australia’s online watchdog is taking messaging app Telegram to court over ‘pro-terrorist’ posts

Australia’s eSafety Commissioner, Julie Inman Grant, has filed a lawsuit against the encrypted messaging app Telegram for allegedly failing to detect and remove pro-terrorist and extremist content. This legal action follows a year-long investigation and is the first enforcement of online codes regarding unlawful material established a year ago. The lawsuit details multiple violations of the Online Safety Act 2021, including the failure to remove posts related to the Christchurch mosque attack and the Buffalo mass shooting, despite user reports. Telegram has claimed to have blocked over 150,000 terrorist-related communities and removed over 200 million pieces of terrorist content. If the lawsuit is successful, it could lead to penalties up to A.6 million and potentially a ban on the app in Australia.

AppWizard

June 16, 2026

1 Million Users Donate To Rescue Session Messenger From Shutdown

Session, a decentralized encrypted messenger, has over a million monthly users and has secured its future through community donations after facing a funding crisis earlier this year. The Session Technology Foundation had to reduce its paid staff and warned of a potential closure in July due to a significant financial shortfall. However, the community raised sufficient funds to prevent shutdown, allowing development to continue until at least 2027. The majority of contributions came from everyday users passionate about privacy communication. Session operates without requiring phone numbers and uses a decentralized network to enhance privacy. Under the leadership of Jason Rhinelander, the team is focusing on new features like post-quantum encryption. The organization also aims to achieve self-sustainability with a new paid Pro tier. Co-founder Chris McCabe's public appeal for support in March preceded staff layoffs on April 9, and Ethereum co-founder Vitalik Buterin previously donated 128 Ether (ETH) to assist the foundation.

AppWizard

June 10, 2026

France’s Government Messaging App Tchap Got Breached

On June 7, 2026, Tchap, the French government's encrypted messaging platform for civil servants, experienced a significant breach detected by ANSSI. The breach resulted from a compromised user account and involved the education shard of Tchap, specifically targeting matrix.agent.education.tchap.gouv.fr. Approximately 650,000 messages, data from over 73,000 accounts, and about 13.5GB of documents and media files were allegedly scraped. The attacker also claimed to have discovered hardcoded LDAP credentials leaked through a PowerShell script shared by a regional director of the French tax authority. DINUM, the French Digital Affairs Directorate, stated that private conversations on Tchap are end-to-end encrypted and that the compromised account has been blocked. They notified CNIL about the potential exposure of personal data and reminded users to avoid sharing sensitive information in public chat rooms. The breach follows a mandate from Prime Minister François Bayrou in August 2025 requiring all civil servants to use Tchap, increasing its attractiveness as a target for cyber threats. The investigation into the breach is ongoing.

Winsage

June 2, 2026

New PHANTOMPULSE RAT Campaign Uses UAC Bypass in Windows Attacks

The REF6598 intrusion set has revealed a Remote Access Trojan (RAT) named PHANTOMPULSE, which is distributed via malicious Obsidian plugins. It uses advanced evasion techniques, including a blockchain-based command and control (C2) channel and a public User Account Control (UAC) bypass to infiltrate Windows systems. The malware disables security measures like the Antimalware Scan Interface (AMSI) and Windows Lockdown Policy (WLDP) through a hardware-breakpoint technique, allowing it to avoid detection by signature-based memory scanners. PHANTOMPULSE hides its core files in encrypted registry blobs and creates scheduled tasks that appear as .NET Framework updates. Its decentralized C2 framework queries public blockchains for operational data, but it lacks sender authentication, which can be exploited by defenders. The malware inventories the system for antivirus software and targets high-value applications. It employs a UAC bypass technique called “schuac” to gain elevated permissions. Analysts attribute this campaign to DPRK-aligned threat actors, particularly the BlueNoroff group, due to its focus on cryptocurrency wallets and blockchain exploitation. Defenders can identify new infrastructure by searching blockchain ledgers for a specific hex signature associated with the malware's C2 encryption routine.

AppWizard

April 28, 2026

XChat Goes Live: X Drops Encrypted Messaging App to Rival WhatsApp, Telegram Fast

X has introduced XChat, a dedicated messaging platform emphasizing privacy and security, currently available for pre-order in the App Store. XChat is a standalone app that offers a focused communication experience, isolating messaging from social media functionalities. It employs end-to-end encryption, ensuring only the sender and recipient can access messages, and features no advertisements or tracking. Key features include encrypted one-on-one and group chats, disappearing messages, screenshot blocking, video calling, and file sharing. XChat is part of X's broader strategy to evolve into an "everything app," which may include content sharing, payments, and financial services.

AppWizard

April 27, 2026

Elon Musk’s XChat App Is More Like Facebook’s Messenger Than Signal

Elon Musk launched the XChat app, a stand-alone messaging service for X users, claiming it to be the only secure, encrypted messaging app. Critics have raised concerns about XChat's security, particularly its requirement to link an existing X account and the storage of cryptographic keys on X's servers. The app's rollout faced delays and confusion, with users in the UK experiencing access issues. Initial user experiences indicated limited messaging capabilities, as many contacts may not have X accounts. The app's privacy claims were questioned, as it still collects data linked to users. XChat shares similarities with Facebook's Messenger, both requiring account creation and linking to their respective platforms.

AppWizard

April 27, 2026

Signal isn’t broken — so how are hackers targeting the world’s ‘most secure’ chat app?

On April 26, hackers allegedly linked to Russian groups targeted the Signal messaging app with phishing attacks aimed at senior politicians. These attacks did not compromise Signal's end-to-end encryption; rather, they deceived users into providing access to their accounts through fake messages. Signal is operated by the non-profit Signal Foundation, founded in 2012 by Moxie Marlinspike with funding from Brian Acton, a co-founder of WhatsApp. Signal distinguishes itself by rendering metadata invisible to its operators, unlike WhatsApp, which shares user data with its parent company. Signal's president, Meredith Whittaker, advocates for data privacy.

AppWizard

April 22, 2026

Australia probes Roblox and Minecraft over child safety

Australia's eSafety regulator has issued legally enforceable transparency notices to gaming companies, including Microsoft and Roblox, requiring them to detail their measures against sexual exploitation and radicalisation. The eSafety Commissioner, Julie Inman Grant, highlighted that 90% of Australians aged eight to seventeen engage in online gaming, which poses risks such as grooming and radicalisation. Non-compliance with the notices could lead to penalties. Microsoft is reviewing the notice, while Roblox is facing over 140 lawsuits in U.S. federal courts for allegedly facilitating child sexual exploitation. Roblox has reached settlements in Alabama and West Virginia and plans to introduce tailored accounts for younger users.