Russia-linked actors target WhatsApp and Signal in phishing campaign

Russia-linked actors are conducting a global phishing campaign targeting Signal and WhatsApp users—especially government officials, military personnel, politicians, and journalists—by impersonating app support and tricking victims into revealing verification codes or linking devices; this enables account takeover, access to messages and contacts, impersonation, and further phishing (with thousands of accounts reportedly compromised), prompting warnings from the FBI, CISA, and Dutch intelligence.