NCSC Issues Messaging-App Security Guidance for High-Risk Individuals
Summary
The NCSC and international partners warn that Russia-based actors are increasingly targeting high-risk individuals through messaging apps and have issued guidance to help protect accounts.
Key points
- The NCSC and international partners report growing malicious activity by Russia-based actors targeting high-risk individuals through messaging apps.
- The NCSC published an infographic with steps to protect accounts on apps such as WhatsApp and Signal.
- High-risk individuals may include people whose roles or public status give them access to sensitive information or influential contacts.
- The NCSC says government workers should follow guidance on using non-corporate communications channels.
- The NCSC has previously reported account targeting by China state-affiliated APT31, Russia's Star Blizzard, and Iran's IRGC.
Article Details
- Defense Focus
- Reducing the risk of targeted attacks against high-risk individuals’ messaging-app accounts.
- Defensive Actions
- High-risk individuals can consult the NCSC’s “using messaging applications” infographic for account-protection guidance.
- People working in government should follow government guidance on using non-corporate communications channels.
Threat Actors
APT31Identified as China state-affiliated and previously reported by the NCSC in connection with targeting government officials’ accounts.Islamic Revolutionary Guard Corps (IRGC)Identified as Iranian and previously reported by the NCSC in connection with targeting government officials’ accounts.Star BlizzardIdentified as a Russian Federal Security Service (FSB) actor and previously reported by the NCSC in connection with targeting government officials’ accounts.
Products
MessengerMessaging apps such as WhatsApp, Messenger and Signal are an important part of how we communicate every day.SignalThe 'using messaging applications infographic' outlines how high-risk individuals can protect their accounts when using apps such as WhatsApp and Signal.WhatsAppThe 'using messaging applications infographic' outlines how high-risk individuals can protect their accounts when using apps such as WhatsApp and Signal.
Countries
ChinaThe NCSC has previously reported on the targeting of government officials’ accounts by China state-affiliated APT31, Russian Federal Security Service (FSB) actor Star Blizzard and Iran's Islamic Revolutionary GuardIranaccounts by China state-affiliated APT31, Russian Federal Security Service (FSB) actor Star Blizzard and Iran's Islamic Revolutionary Guard Corps (IRGC).RussiaThe NCSC and international partners have seen growing malicious activity from Russia-based actors using messaging apps to target high-risk individuals.