The FBI and the Cybersecurity and Infrastructure Security Agency (CISA) have issued a stark warning, urging Americans to avoid sending text messages between iPhones and Android devices. Instead, they recommend switching to fully encrypted messaging apps to bolster cybersecurity.
The advisory follows significant cyberattacks attributed to “Salt Typhoon,” a hacking group linked to China’s Ministry of Public Security. These attacks have exposed vulnerabilities in U.S. telecommunications networks, raising concerns about the security of critical communication systems.
“Use Encrypted Communications,” Warns CISA
“Use your encrypted communications where you have it,” said Jeff Greene from CISA during a press briefing. He emphasized that encryption provides a robust defense against cyber threats, rendering intercepted data unreadable.
Cross-Platform Messaging at Risk
Messages exchanged within the same ecosystem, such as iPhone-to-iPhone (iMessage) or Android-to-Android (Google Messages), are encrypted. However, texts between the two platforms remain vulnerable due to the lack of end-to-end encryption in Rich Communication Services (RCS), the modern successor to SMS.
While tech giants Google and Apple have acknowledged the issue, progress on implementing encryption for RCS has been sluggish. Until this gap is closed, experts recommend avoiding standard text messaging for sensitive communication.
Encrypted Apps Offer a Solution
Officials are promoting the use of encrypted messaging apps like Signal, WhatsApp, and Facebook Messenger. These apps provide end-to-end encryption for texts and voice calls, ensuring secure communication across platforms.
“Encryption is your friend,” said Greene. “Whether for text messaging or voice communication, encrypted data is nearly impossible for adversaries to access.”
Broader Cybersecurity Concerns
The advisory highlights the increasing risks posed by state-sponsored cyberattacks. A joint alert from the FBI, CISA, NSA, and allied intelligence agencies has urged individuals and businesses to adopt stricter cybersecurity measures.
A Timely Warning
The announcement coincides with Apple’s anticipated iOS 18.2 update, which will allow users to switch their default messaging app from iMessage. This feature could facilitate the adoption of more secure platforms.
Until end-to-end encryption becomes universal, experts advise relying on apps like Signal and WhatsApp for cross-platform messaging to safeguard personal and sensitive information.