Phishing Campaign Targeting Signal: Investigation Points to Russian Hackers

Colleagues, I want to highlight a cybersecurity incident: researcher Donncha O'Kirvall was targeted by a phishing campaign aimed at seizing Signal accounts.

Key points:
- The attack posed as Signal support and urged targets to enter a code to link their account to another device.
- CISA, UK and Dutch authorities associate similar campaigns with Russian state-backed actors; the researcher reports over 13,500 targets.
- The attacks were automated using the "ApocalypseZ" tool; the interface and translations are in Russian.

Recommend enabling Registration Lock and never entering codes received via messages at someone’s request.

Why it matters: automation and a snowball effect increase the risk of mass compromises.

How are you protecting your team from such attacks?

#cybersecurity #phishing #Signal #security