Federal News
FBI and CISA Warn Russian Hackers Target Messaging Apps
March 23, 2026
The FBI and Cybersecurity and Infrastructure Security Agency (CISA) have jointly issued a public advisory warning of an ongoing, large-scale phishing campaign by Russian intelligence-linked cyber actors targeting users of encrypted messaging applications such as Signal and WhatsApp. The campaign primarily focuses on high-value individuals including U.S. government officials, military personnel, journalists, and political figures. Attackers employ sophisticated social engineering tactics to bypass end-to-end encryption by tricking users into sharing authentication codes, resulting in thousands of compromised accounts globally. This threat underscores the critical need for enhanced cybersecurity measures and user vigilance to protect sensitive communications.
- Why this matters: Federal agencies and contractors using commercial messaging apps must prioritize user training on phishing risks and implement multi-factor authentication to mitigate account takeover threats.
- The campaign's focus on high-value targets indicates a persistent state-sponsored cyber espionage risk affecting government communications and sensitive data.
- Procurement professionals should consider cybersecurity service providers specializing in phishing defense, user awareness programs, and secure communication platforms.
- Organizations are encouraged to report incidents promptly to the Internet Crime Complaint Center (IC3) and coordinate with CISA for threat intelligence sharing and mitigation guidance.
We anticipate the tactics and methods used to target Signal will grow in prevalence in the near-term and proliferate to additional threat actors and regions outside the Ukrainian theater of war.
— Google Threat Intelligence Group
The FBI has identified cyber actors associated with Russian Intelligence Services targeting users of commercial messaging applications, including Signal.
— Kash Patel, FBI Director
FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks
— Ravie Lakshmanan
Agencies
Federal Bureau of Investigation, Cybersecurity and Infrastructure Security Agency, Internet Crime Complaint Center, Dutch Intelligence Agency, Military Intelligence and Security Service
Vendors
Signal, WhatsApp
Locations
Sources
- FBI, CISA issue PSA on Russian intelligence campaign to target messaging apps | CyberScoop · CyberScoop · Mar 20
- FBI sends 'Russian warning' to Americans; says: Hackers linked to Russia are targeting you on ... - The Times of India · The Times of India · Mar 21
- FBI issues warning: Russian hackers target messaging apps in massive phishing campaign · MSN · Mar 21
- FBI Reveals Hackers Associated with Russia Target Message App Users, Thousands of Accounts Breached · VOI.id · Mar 22
- Russian hackers targeting WhatsApp, Signal users in phishing campaign—FBI & global agencies warn · MSN · Mar 21