Russian Hackers Phish EU Officials Over Messaging Apps
Russian hackers target EU officials using Signal and WhatsApp for phishing attacks.
Run Signal?
Get an email when a reviewed story names Signal, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
Summary
Nation-state threat groups, reportedly Russian, are increasingly targeting EU officials through encrypted messaging applications like Signal and WhatsApp, shifting away from traditional email phishing. This trend is prompting EU governments to reconsider their reliance on these popular platforms for sensitive communications.
The lesson from this incident
Full lessonNation-state actors are exploiting the misplaced trust officials place in encrypted messaging apps like Signal and WhatsApp, using these platforms as new phishing vectors for sensitive government communications. The root cause is a lack of security awareness and formal policy governing which platforms are approved for handling classified or sensitive information. Officials often assume end-to-end encryption equates to overall security, overlooking social engineering risks, account compromise, and device-level threats. This matters because successful phishing of government officials can lead to espionage, policy leakage, and compromise of diplomatic relationships. The shift in attacker tactics highlights how threat actors continuously adapt when traditional vectors become better defended.
What helps against this
How we list vendors- Phishing-resistant MFA
A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.
- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Security awareness training and phishing simulation
People recognise and report attacks instead of falling for them.