Russian hackers launch major operation targeting Signal and WhatsApp: Who is under attack
Illustrative photo: Russian hackers targeted users of Signal and WhatsApp (Getty Images)
Russian hackers have launched a global cyber campaign aimed at hacking accounts on the messaging apps Signal and WhatsApp, according to a joint statement by the Netherlands’ General Intelligence and Security Service (AIVD) and the Military Intelligence and Security Service (MIVD), according to Reuters.
Who is being targeted
According to Dutch intelligence services, the targets and victims of Russian hackers include:
-
Employees of the Dutch government;
-
Journalists.
"The Russian hackers have likely gained access to sensitive information," the Dutch intelligence agencies noted.
How the hacking scheme works
The main tactic involves tricking victims into revealing security verification codes and PIN codes:
-
Fake support: hackers create chats impersonating Signal's official support service.
-
Linked devices feature: this allows attackers to read messages and view the victim’s group chats secretly.
WhatsApp has already officially warned users that the company never asks for verification codes through chats.
Security recommendations
Dutch intelligence has issued a warning to government colleagues. The director of the Military Intelligence and Security Service, Vice Admiral Peter Reesink, noted that even a high level of protection in apps does not make them suitable for state secrets.
"Despite their end-to-end encryption option, messaging apps such as Signal and WhatsApp should not be used as channels for classified, confidential or sensitive information," Reesink said.
Signs that an account may be hacked
-
Duplicate contacts appearing in the list;
-
Numbers displayed as a "removed account" (which may indicate manipulation by hackers).
Hack of British military bases
A major data breach occurred at the UK Ministry of Defence last year.
Hackers broke into the systems of contractor Dodd Group, which services military facilities.
A Russian hacking group (likely Lynx) gained access to internal documents, service addresses, and personal data of about 272,000 service members and veterans, including their bank details.
