Germany warns of Signal account hijacking targeting senior figures

German intelligence agencies (BfV and BSI) warn of suspected state-sponsored phishing campaigns targeting politicians, military officers, diplomats, and journalists across Germany and Europe by hijacking messaging accounts (Signal, and potentially WhatsApp). Attackers either trick victims into revealing Signal PINs or SMS verification codes to takeover accounts, or persuade them to scan QR codes to pair an attacker-controlled device, allowing access to chats and contacts without malware; authorities recommend blocking fake support contacts, enabling Signal’s Registration Lock, and regularly reviewing linked devices.