TLDR InfoSec · ATTACKS & VULNERABILITIES

RUSSIA-BACKED HACKERS BREACH SIGNAL AND WHATSAPP ACCOUNTS OF OFFICIAL JOURNALISTS

links.tldrnewsletter.com2 min read

Summary from the TLDR InfoSec newsletter

Dutch intelligence agencies are warning officials, military personnel, and journalists of a new social engineering campaign being carried out by Russia-backed attackers seeking to gain access to their Signal and WhatsApp accounts. The attacks are being carried out via crafted phishing messages that request users' security verification and pin codes. The attackers frequently masquerade as a Signal support chatbot or use the linked devices feature to trick users.