Cybersecurity and Russian Intelligence Operations

The FBI and the Cybersecurity and Infrastructure Security Agency have issued a joint public service announcement warning that hackers tied to Russian intelligence services are running a global phishing campaign to hijack accounts on Signal and other commercial messaging apps, compromising "thousands" of users. FBI Director Kash Patel said the operation is focused on individuals of "high intelligence value," including current and former U.S. government officials, military personnel, political figures and journalists. According to the PSA, the attackers are not breaking end‑to‑end encryption but instead impersonate app support or send fake security alerts to trick users into clicking malicious links or disclosing verification codes and PINs, allowing the hackers to link their own devices to victims’ accounts. Once in, they can read messages, access contact lists and send messages as the victim, using that trusted identity to launch further phishing attempts. Users who suspect compromise are urged to report to the FBI’s Internet Crime Complaint Center, and the warning underscores that social‑engineering attacks can nullify even strong encryption if users are deceived into handing over credentials.