Russian Groups Target Signal Messenger in Spy Campaign

Multiple Russia-aligned threat groups are actively targeting Signal Messenger to intercept sensitive communications of persons of interest (military, government) by social-engineering victims to link their Signal accounts to attacker-controlled devices (malicious QR codes, phishing sites) and by stealing local Signal data via malware and file-copying tools; Google TAG researchers warn these tactics may proliferate to WhatsApp, Telegram, and other messaging apps.