Russian Hackers Target Signal And WhatsApp Accounts Of Officials And Journalists!

Digital communication platforms have become a routine part of everyday life. People rely on them for quick updates, work discussions, and staying connected across distances. Apps like WhatsApp and Signal are especially popular because they offer strong privacy features and end-to-end encryption, which makes many people feel their conversations are secure.

Well, that popularity can also attract cyber attackers who try to get into private chats. Recently, authorities warned that a similar cyber campaign has been targeting users on these platforms.

 

TL;DR

 

• Russian-linked hackers targeted Signal and WhatsApp accounts of officials and journalists.
• Attackers used phishing messages to steal verification or PIN codes.
• Both apps said their systems were not hacked and warned users not to share verification codes.

Russian-linked hackers have launched a global cyber campaign to access Signal and WhatsApp accounts used by officials, military personnel, and journalists, according to two Dutch intelligence agencies. The warning was issued on Monday by the General Dutch Intelligence Agency (AIVD) and the Dutch Military Intelligence and Security Service (MIVD).



The agencies said the attackers mainly use phishing messages to trick users into sharing verification or PIN codes. Once these codes are shared, hackers can take control of the accounts and gain access to private chats and group conversations.

According to AIVD and MIVD, "The Russian hackers have likely gained access to sensitive information.”

The campaign has targeted several groups, including Dutch government employees and journalists. Intelligence officials explained that encrypted messaging apps are attractive targets because they are often used to discuss confidential or classified information.

Messaging apps with end-to-end encryption are widely used by government officials to share confidential or classified information, making them "the ideal place for malicious actors to try to capture sensitive information," the AIVD and MIVD said.

In many cases, attackers contact users through chat messages while pretending to be trusted contacts or support teams. Some hackers reportedly pose as a Signal Support chatbot to convince victims to share verification codes. Another tactic involves misusing Signal’s “linked devices” feature to secretly connect another device to the victim’s account.
 
Despite the attacks, both messaging platforms said their systems were not breached. Signal said the attacks were "executed via ⁠sophisticated phishing campaigns, designed to trick users into sharing information" and added that its encryption and infrastructure remain secure.

WhatsApp also warned users never to share their six-digit verification code with anyone and said it continues to build stronger protections against online threats. Dutch authorities have issued a cyber advisory to government staff and are working with agencies to identify and remove the threat.

The case is another reminder that cyberattacks often target users rather than the technology itself.