FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks

The FBI and CISA warn that Russian intelligence-affiliated threat actors are conducting mass phishing campaigns targeting Signal and WhatsApp accounts of high-value individuals.

• •Targets include current and former U.S. government officials, military personnel, political figures, and journalists, with thousands of accounts already compromised globally.
• •Attacks use social engineering — impersonating "Signal Support" — to trick victims into sharing verification PINs or clicking malicious links/QR codes.
• •If a victim shares their PIN, the attacker recovers the account and monitors future messages while the victim loses access.
• •If a victim clicks the link or scans the QR code, the attacker's device is silently linked to the account, granting access to all past and future messages.
• •