FBI warns of Russian, Iranian cyber activity involving messaging platforms

The FBI and CISA issued alerts about two active, nation-state campaigns: Russian actors are phishing users of Signal and other messaging apps to add linked devices or fully takeover accounts—compromising messages and contact lists—while Iran’s MOIS-linked group ‘Handala Hack’ distributes Windows malware that masquerades as legitimate apps and uses Telegram bots as C2 to exfiltrate files, capture screens/audio, and monitor targeted dissidents and journalists.