Ukraine Says Russian Campaign Used Social Engineering to Target Messaging Accounts
Summary
Ukraine’s SBU, working with the FBI, says a long-running Russian campaign targeted messaging accounts across several countries using fake support messages to steal credentials and verification codes. The number of affected victims is unknown.
Key points
- The SBU said it uncovered the campaign with the FBI; the FBI had not immediately commented.
- According to the SBU, targets included officials, military personnel, politicians, activists and citizens in Ukraine, Europe and the United States.
- The SBU said attackers impersonated messaging-platform support and sought account credentials or verification codes rather than exploiting app vulnerabilities.
- The campaign allegedly sought sensitive military, political and economic information, as well as victims’ personal data.
- The SBU did not identify the responsible Russian intelligence service, specify which platforms were primarily targeted or report how many people were affected.
Article Details
- Event Type
- Reported Russian campaign using social engineering to compromise messaging accounts.
- Impact
- The SBU said the campaign sought sensitive military, political, and economic information and victims’ personal data. It reported that attackers impersonated messaging-platform support to solicit credentials and verification codes. The number of affected victims and the primary platforms targeted were not disclosed.
MITRE ATT&CK
Products
SignalThe attackers relied on social engineering to steal credentials and personal data from accounts on platforms such as Signal, WhatsApp, and Telegram.TelegramThe attackers relied on social engineering to steal credentials and personal data from accounts on platforms such as Signal, WhatsApp, and Telegram.WhatsAppThe attackers relied on social engineering to steal credentials and personal data from accounts on platforms such as Signal, WhatsApp, and Telegram.
Countries
UkraineUkraine’s SBU, working with the FBI, exposed a long-running Russian campaign that targeted messaging accounts of officials, military personnel, politicians, activists, and citizens in Ukraine, Europe, and the UnitedUnited Statesof officials, military personnel, politicians, activists, and citizens in Ukraine, Europe, and the United States.