cyber.hendryadrian.com
Security News · securityonline.info

FBI and CISA Warn of Russian Intelligence Phishing Targeting Messaging Apps

· Original article ↗

Summary

The FBI and CISA warn that Russian Intelligence Services are using social engineering and linked-device features to access messaging accounts, especially Signal, and monitor conversations. The agencies urge users to strengthen security settings and question unsolicited

Key points

  • The FBI and CISA warn of a global phishing campaign targeting commercial messaging app accounts.
  • The article says attackers use impersonation, malicious links or QR codes, and linked-device features, with Signal users especially targeted.
  • An attacker who links a device may view existing messages, monitor conversations, and collect contacts.
  • The agencies say individual accounts—not the messaging apps’ encryption or the apps themselves—are compromised.
  • Attackers may use compromised accounts to contact further targets and infiltrate group chats.
  • The agencies urge users to strengthen security settings and be skeptical of unsolicited verification requests.

Article Details

Event Type
Global phishing campaign and account-takeover operation targeting commercial messaging applications
Impact
The FBI and CISA warn that Russian Intelligence Services have compromised thousands of individual accounts, particularly Signal accounts, by abusing linked-device features. Attackers can view message history, monitor conversations, harvest contacts, infiltrate group chats, and use compromised accounts for follow-on phishing. The agencies state that the applications’ encryption and the applications themselves were not compromised.

MITRE ATT&CK

T1098.005 · Device RegistrationThe actors abuse messaging applications’ linked-device feature to connect an attacker-controlled device to a victim’s account.T1566.002 · Spearphishing LinkThe campaign uses malicious links in social-engineering messages impersonating trusted contacts to compromise messaging accounts.

Threat Actors

Russian Intelligence ServicesThe FBI and CISA attribute the global phishing and account-compromise campaign to the Russian Intelligence Services; the article reports their use of social engineering and linked-device feature abuse, especially against Signal users.

Products

SignalThe actors use social engineering and abuse of linked-device features—especially against Signal users—to take over accounts, monitor messages, infiltrate group chats, and conduct follow-on phishing, prompting agencies

Countries

United StatesThe activity targets individuals of high intelligence value, such as current and former U.S.

Industries

GovernmentThe operation targets Commercial Messaging Applications (CMAs) to infiltrate the private communications of government officials, military personnel, and journalists.MilitaryThe operation targets Commercial Messaging Applications (CMAs) to infiltrate the private communications of government officials, military personnel, and journalists.

Related Articles