Today's cybersecurity headlines are brought to you by ThreatPerspective


Ethical Hacking News

Russia-Linked Actors Target WhatsApp and Signal Accounts in Sophisticated Phishing Campaign




A recent report by the FBI has highlighted a sophisticated phishing campaign targeting high-value accounts on messaging apps like WhatsApp and Signal. The attackers, linked to Russian Intelligence Services, have been using phishing tactics to gain access to the accounts of government officials, military personnel, politicians, and journalists. Thousands of accounts worldwide have already fallen victim to this campaign.



  • The FBI has reported a sophisticated phishing campaign targeting high-value accounts on messaging apps like WhatsApp and Signal.
  • The attackers, linked to Russian Intelligence Services, are using legitimate features of the apps to gain access to victims' accounts.
  • Thousand of accounts worldwide have already been compromised in this campaign.
  • Users can reduce the risk by strengthening their security and staying alert to social engineering attempts.
  • Phishing remains a simple but effective way for attackers to compromise accounts, gaining full account access.
  • Russian cyber spies have been linked to various campaigns in recent years, often targeting government officials and military personnel.



  • A recent report by the FBI has highlighted a sophisticated phishing campaign targeting high-value accounts on messaging apps like WhatsApp and Signal. The attackers, linked to Russian Intelligence Services, have been using phishing tactics to gain access to the accounts of government officials, military personnel, politicians, and journalists.

    According to the FBI, the attackers are not exploiting vulnerabilities in the apps themselves but rather abusing legitimate features of Signal and WhatsApp. They are posing as messaging app support accounts and sending phishing messages tailored to trick targets into sharing verification codes or clicking on malicious links. Once the attackers gain access, they can read messages, access contacts, impersonate victims, and launch further phishing attacks using trusted identities.

    The campaign has already compromised thousands of accounts worldwide, with the attackers using various tactics to breach security. They are especially targeting Signal but using similar tactics across other platforms. Users who strengthen their security and stay alert to social engineering attempts can reduce the risk and limit the impact of these attacks.

    The use of phishing in this campaign is a classic example of how attackers can bypass protections like end-to-end encryption by targeting users directly. Phishing remains a simple but highly effective way for attackers to compromise accounts, gaining full account access.

    It's essential for users to be vigilant and take steps to protect themselves from such attacks. This includes pausing if something feels off, never sharing PINs or 2FA codes, and treating unexpected messages with suspicion, even from known contacts. Always checking links before clicking, verifying group members, and using built-in security features can also help.

    The fact that attackers are targeting high-value accounts suggests a significant level of sophistication and coordination. Russian cyber spies have been linked to various campaigns in recent years, often targeting government officials, civil servants, and military personnel. This latest campaign highlights the growing cyber risks to sensitive communications among national security actors.

    Experts warn that apps like Signal and WhatsApp should not be used for classified or confidential information. Instead, they should be used for personal communication only. By taking these precautions, users can significantly reduce the risk of falling victim to such attacks.

    The use of legitimate features by attackers is a key aspect of this campaign. It's essential for messaging app developers to ensure that their platforms are secure and that users are aware of the potential risks associated with using legitimate features in this way.

    In conclusion, the phishing campaign targeting WhatsApp and Signal accounts is a significant threat to the security of high-value accounts. Users must be vigilant and take steps to protect themselves from such attacks. By understanding the tactics used by attackers and taking precautions, users can significantly reduce the risk of falling victim to these sophisticated phishing campaigns.



    Related Information:
  • https://www.ethicalhackingnews.com/articles/Russia-Linked-Actors-Target-WhatsApp-and-Signal-Accounts-in-Sophisticated-Phishing-Campaign-ehn.shtml

  • https://securityaffairs.com/189808/intelligence/russia-linked-actors-target-whatsapp-and-signal-in-phishing-campaign.html

  • https://thehackernews.com/2026/03/fbi-warns-russian-hackers-target-signal.html

  • https://abit.ee/en/cybersecurity/hackers-and-attacks/fbi-signal-whatsapp-phishing-russian-hackers-cybersecurity-cisa-social-engineering-messaging-apps-en


  • Published: Sun Mar 22 15:31:11 2026 by llama3.2 3B Q4_K_M













    © Ethical Hacking News . All rights reserved.

    Privacy | Terms of Use | Contact Us