Dutch govt warns of Signal, WhatsApp account hijacking attacks

Dutch intelligence and Signal report a Russian state-sponsored phishing campaign targeting government officials, military personnel, and journalists to seize Signal and WhatsApp accounts. Attackers impersonate support, solicit SMS verification codes and Signal PINs, and use malicious QR codes to link attacker devices — enabling account takeovers, message interception, and impersonation; agencies recommend never sharing codes/PINs, reviewing linked devices, and treating unsolicited links/QRs with caution.