Russian intelligence agencies are hijacking access to Signal and WhatsApp accounts
Hostile hackers have launched a large-scale cyber operation aimed at hijacking user accounts on the popular messaging apps Signal and WhatsApp.
This was officially reported by the Center for Countering Disinformation, noting that the attackers’ main goal is to gain access to strategically important information.
The attacks are clearly targeted at individuals who are of high intelligence value to the enemy.
This includes current and former government officials, military personnel, leading politicians, and journalists working in the combat zone.
According to cybersecurity experts, the aggressor’s primary goal is to steal confidential correspondence and monitor private chat rooms.
Defense, logistics, and the movement of Ukrainian Armed Forces units are frequently discussed in such communication channels.
It is important to understand that the end-to-end encryption of Signal and WhatsApp has not been compromised.
Accounts are compromised through manipulation and social engineering, where hackers pose as representatives of security services or technical support.
Attackers use sophisticated psychological tactics to trick users into voluntarily sharing their verification codes.
“Accounts are compromised due to the users’ own actions—hackers pose as security service representatives and trick users into revealing verification codes,” emphasize experts from the CSD.
The situation with the compromise of Signal profiles poses significant risks, as this app has long been considered a benchmark for security.
Currently, Ukrainian cybersecurity experts are conducting an investigation and taking measures to minimize the consequences of this data breach.
To reliably protect your account, experts recommend immediately enabling two-factor authentication.
It is also necessary to enable a special PIN code for registration (Registration Lock) in the messenger’s privacy settings section.
Users are advised to regularly check the list of connected devices in the "Linked Devices" menu and delete all unknown sessions.
This will allow you to detect unauthorized access in a timely manner and block access to your messages.
As a reminder, the FBI and CISA have warned of a large-scale breach of Signal accounts by Russian hackers.
Additionally, Dutch military intelligence has documented a large-scale campaign by Russian hackers aimed at gaining access to the private accounts of officials, military personnel, and journalists.
