Adam Donenfeld Profile picture
Security Researcher | @Zimperium
Mar 29 8 tweets 2 min read
Here's a video of an unusual behavior I captured on my device Thursday last week. Note the number of "Signal Connection" (=verified) contacts I have never seen before, along with two VoIP call attempts. Why is this behavior unexpected?
1. Contacts appear they were already blocked by me (despite not blocking them)
2. The label has the same name as over 20+ of other contacts, which were all verified as "Signal Connections." I tried doing some more tests later and connected the device again to the internet, and suddenly that number jumped to over a hundred.

Oddly enough, the two calls are in concurrence with VoIP crashes/stack traces.