Charges Against Treasury Employee Show Weakness of Encrypted Apps

Charges Against Treasury Employee Show Weakness of Encrypted Apps

Encryption apps are only as secure as you make them.

Last week, the government unveils criminal charges against a Treasury Department employee accused of leaking confidential banking reports involving key figures in the special counsel's prove of Russian electron interference. The findings are a reminder that encrypted apps used by millions around the world may provide a false sense of security for people who do not use them correctly or take other security precautions.

Prosecutors say Natalie Mayflower Sours Edwards, a senior official at the department's financial crimes unit, sent photos of the documents through an encrypted app to a reporter, who used them as the basis for a dozen stories related to the probe, according to the Washington Post. 

Normally, it would have been extremely difficult for investigators to have intercepted the messages because of the high level of security encrypted messaging apps provide, but prosecutors say they found hundreds of the messages Edwards stored on her cellphone when they searched the device last week.

The messages are said to have included communications in which Edwards "transmitted or described" the banking documents to the reporter.

The case is a high-profile reminder that users need to take extra steps — beyond just downloading an app — to receive the full benefits of an encrypted service. In other words, if you are backing up your decrypted messages onto your device, you are no longer protected by the app.

The potential false sense of security is an especially important warning sign for reporters and their sources, who have turned increasingly to encrypted apps for confidential communication. 

Cybersecurity reported Kim Zetter tweeted, "This should be an instruction for both reporters and their sources — encrypted messages are UNENCRYPTED on receiving/sending devices. If authorities obtain the device, the encryption is no good."

About the Author

Sydny Shepard is the Executive Editor of Campus Security & Life Safety.

Featured

New Products

  • Camden CM-221 Series Switches

    Camden CM-221 Series Switches

    Camden Door Controls is pleased to announce that, in response to soaring customer demand, it has expanded its range of ValueWave™ no-touch switches to include a narrow (slimline) version with manual override. This override button is designed to provide additional assurance that the request to exit switch will open a door, even if the no-touch sensor fails to operate. This new slimline switch also features a heavy gauge stainless steel faceplate, a red/green illuminated light ring, and is IP65 rated, making it ideal for indoor or outdoor use as part of an automatic door or access control system. ValueWave™ no-touch switches are designed for easy installation and trouble-free service in high traffic applications. In addition to this narrow version, the CM-221 & CM-222 Series switches are available in a range of other models with single and double gang heavy-gauge stainless steel faceplates and include illuminated light rings.

  • PE80 Series

    PE80 Series by SARGENT / ED4000/PED5000 Series by Corbin Russwin

    ASSA ABLOY, a global leader in access solutions, has announced the launch of two next generation exit devices from long-standing leaders in the premium exit device market: the PE80 Series by SARGENT and the PED4000/PED5000 Series by Corbin Russwin. These new exit devices boast industry-first features that are specifically designed to provide enhanced safety, security and convenience, setting new standards for exit solutions. The SARGENT PE80 and Corbin Russwin PED4000/PED5000 Series exit devices are engineered to meet the ever-evolving needs of modern buildings. Featuring the high strength, security and durability that ASSA ABLOY is known for, the new exit devices deliver several innovative, industry-first features in addition to elegant design finishes for every opening.

  • Compact IP Video Intercom

    Viking’s X-205 Series of intercoms provide HD IP video and two-way voice communication - all wrapped up in an attractive compact chassis.