Full Breakdown
Russian Hackers Target Signal and WhatsApp Accounts of Officials and Journalists
3/9/2026, 8:36:20 PM
Overview of the Cyber Campaign
Dutch intelligence agencies, including the General Intelligence and Security Service (AIVD) and the Military Intelligence and Security Service (MIVD), have reported a significant cyber campaign attributed to Russian-backed hackers. This operation aims to compromise Signal and WhatsApp accounts utilized by government officials, military personnel, and journalists. The hackers employ social engineering tactics, primarily masquerading as Signal Support chatbots to persuade users to divulge their security verification codes and PINs, thereby gaining unauthorized access to private accounts and group chats.
Methods of Attack
The hackers' strategies include exploiting the “linked devices” feature within Signal and WhatsApp, which allows additional devices to connect to a user’s account. Once compromised, attackers can read incoming messages and access conversations in group chats. The intelligence agencies have noted that the campaign has likely already provided the hackers with sensitive information. They emphasize that while Signal and WhatsApp offer end-to-end encryption, these platforms are not suitable for sharing classified or confidential information.
Official Statements & Responses
In response to the ongoing threat, the AIVD and MIVD have issued a cyber advisory to alert government employees about the vulnerabilities associated with these messaging apps. Vice-Admiral Peter Reesink, director of the MIVD, stated, “Despite their end-to-end encryption option, messaging apps such as Signal and WhatsApp should not be used as channels for classified, confidential or sensitive information.” WhatsApp has also advised users against sharing their six-digit verification codes and continues to enhance its protective measures against online threats.
Criticism & Opposition
While the intelligence agencies have highlighted the risks associated with using these messaging platforms for sensitive communications, there is an ongoing debate regarding the effectiveness of current cybersecurity measures. Critics argue that reliance on end-to-end encryption may provide a false sense of security, potentially leading users to underestimate the risks posed by social engineering tactics employed by hackers.
Conflicting Reports & Gaps
There is a lack of detailed information regarding the specific identities of other nations or individuals targeted in this cyber campaign beyond Dutch officials and journalists. Additionally, while the intelligence agencies assert that the campaign has likely compromised accounts, the extent of the sensitive information accessed remains unclear.
Verbatim Quotes
- “The Russian hackers have likely gained access to sensitive information,” — AIVD and MIVD
- “Chat applications such as Signal and WhatsApp, even though they have end-to-end encryption, are not channels for classified, confidential or sensitive information,” — Vice-Admiral Peter Reesink, MIVD Director
This ongoing cyber campaign underscores the vulnerabilities associated with popular messaging applications and highlights the need for heightened awareness and improved security practices among users, particularly those handling sensitive information.
