CISA and FBI Warn of Russian-Linked Phishing Targeting Messaging App Accounts
Summary
CISA and the FBI warn that actors linked to Russian Intelligence Services are using social engineering to take over commercial messaging app accounts. The agencies report thousands of compromised accounts and urge users to protect verification codes and scrutinize links
Key points
- CISA and the FBI say actors linked to Russian Intelligence Services are targeting users of commercial messaging apps.
- The campaign reportedly impersonates platform support and uses requests for verification codes, PINs, account recovery, or link clicks to gain access.
- The article says thousands of accounts have been compromised globally, including accounts on Signal; encryption itself is not described as broken.
- Access to a compromised account can expose private messages and contacts, enable impersonation, and support further phishing.
- The article says attackers may deploy malware in some cases, but gives no further details.
- The agencies advise users to be cautious with unexpected messages and links, protect verification codes, use built-in security features, and report incidents.
Article Details
- Event Type
- Phishing campaign using social engineering to compromise commercial messaging app accounts
- Impact
- CISA and the FBI report that thousands of accounts have been compromised globally. Attackers can access private messages and contacts, impersonate victims, and spread further phishing. The article says encryption remains intact and the campaign bypasses it through account compromise.