Global Cyber Campaign Targets Signal and WhatsApp Accounts

Russian-backed hackers have launched a global cyber campaign targeting Signal and WhatsApp accounts of officials, military personnel, and journalists. Using deception, the hackers gain access to sensitive information by persuading users to reveal security verification and PIN codes, prompting Dutch intelligence agencies to issue warnings and advisories.

In a concerning development, Russian-backed hackers have initiated a sweeping cyber offensive aimed at compromising Signal and WhatsApp accounts used by key figures, including officials, military personnel, and journalists. The two prime Dutch intelligence agencies, the General Dutch Intelligence Agency (AIVD) and the Dutch Military Intelligence and Security Service (MIVD), issued stark warnings on Monday regarding the campaign's potential to breach sensitive information.

The hackers employ sophisticated social engineering tactics, often impersonating a Signal Support chatbot to coax users into revealing their security codes. This duplicitous strategy grants the intruders access to personal accounts and secure group chats, compromising a wealth of sensitive data. Additional methods include exploiting the 'linked devices' feature within Signal, alerting users to possible breaches if contacts appear unusually or show as 'deleted accounts.'

In light of the threat, Dutch authorities have proactively disseminated a cyber advisory, emphasizing the need for heightened vigilance and abstaining from using these widely trusted apps for transmitting classified or sensitive information, as reiterated by MIVD Director Vice-Admiral Peter Reesink. Both AIVD and MIVD are working in tandem to reinforce security measures and provide essential guidance to safeguard against these intrusions.