Dutch intelligence agencies warn of Russian-linked phishing campaign targeting Signal and WhatsApp accounts
The Facts
- The Netherlands’ intelligence agencies AIVD and MIVD issued a public warning about a large-scale global cyber campaign attributed to Russian-linked/state actors targeting Signal and WhatsApp accounts.
- The campaign targets accounts associated with officials/civil servants and military personnel, and also includes journalists among the targets or potential targets.
- Dutch agencies said attackers use phishing/social engineering rather than exploiting technical vulnerabilities, initiating chats and impersonating support to trick users into handing over verification codes and/or PINs.
- The agencies said the stolen verification information can allow attackers to take over accounts and access messages, including group chats.
- AIVD and MIVD said the Russian-linked hackers have likely gained access to sensitive information through this campaign.
- The agencies said Dutch government employees are among the targets and victims of the campaign.
Context
How are attackers getting into Signal and WhatsApp accounts?
Dutch intelligence agencies said the attackers start conversations while posing as support (for example, “Signal support”) and persuade targets to share verification codes and PINs; with those details, attackers can take over accounts and access communications, including group chats. TechCrunch Reuters engadget
Who is being targeted in this campaign?
AIVD and MIVD said the campaign targets high-value users such as officials/civil servants and military personnel, and that journalists and other people of interest to the Russian government may also be targeted; Dutch government employees are among the targets and victims identified. Reuters Українська … TechCrunch
Does this warning mean Signal or WhatsApp encryption was broken?
The Dutch agencies described the activity as phishing and social engineering to obtain user verification details, rather than a technical compromise of the apps’ encryption. TechCrunch Reuters
The receipts — all 63 sources
Wire services (3)
Independent coverage (50)
Facts first. Then every angle.
The day’s biggest stories in one short brief — the facts everyone agrees on, then the competing values behind the headlines. Free in your inbox.