BfV and BSI public warning on Signal phishing
Public Sector Action
Summary
Hide ▲
Show ▼
Germany’s BfV and BSI issued a public warning about a Signal phishing campaign, flagging a likely state-controlled cyber actor and the risk to politicians and other politically exposed users. The warning mattered because the lure could let attackers bind a victim’s Signal account to an external device and read private communications. German authorities also personally contacted some politicians to warn that the phishing attempt may have reached them.
Related Happenings
Russian intelligence Signal recovery-key phishing campaign
Campaign
H score29
First: 29.06.2026 11:15
Last: 29.06.2026 11:15
Sources 1
About this happening:
An active Russian intelligence phishing campaign is impersonating Signal support to steal Backup Recovery Keys, verification codes, and account PINs, putting *...
Russian intelligence Signal recovery-key phishing campaign
CampaignAbout this happening: An active Russian intelligence phishing campaign is impersonating Signal support to steal Backup Recovery Keys, verification codes, and account PINs, putting *...
Russian intelligence services fake support SMS messaging-account phishing campaign
Campaign
H score29
First: 27.06.2026 20:27
Last: 27.06.2026 20:27
Sources 1
About this happening:
A long-running phishing campaign by Russian intelligence services is stealing messaging-account credentials from officials, military personnel, politicians, and activi...
Russian intelligence services fake support SMS messaging-account phishing campaign
CampaignAbout this happening: A long-running phishing campaign by Russian intelligence services is stealing messaging-account credentials from officials, military personnel, politicians, and activi...
Suspected Russia-linked Signal phishing campaign targeting political accounts
Campaign
H score18
First: 28.04.2026 13:54
Last: 28.04.2026 13:54
Sources 1
How related:
According to Der Spiegel, the targeted users received messages from a fake Signal security chatbot that informed them of suspicious activity on their accounts and asked them to take immediate action. If the user followed the instructions, including entering a PIN or scanning a QR code, their Signal accounts were linked to an external device controlled by the hackers.
About this happening:
A suspected Russia-linked phishing campaign on Signal compromised about 300 political-sphere accounts, exposing chats, ongoing conversations, and address books. Victim...
Suspected Russia-linked Signal phishing campaign targeting political accounts
CampaignHow related: According to Der Spiegel, the targeted users received messages from a fake Signal security chatbot that informed them of suspicious activity on their accounts and asked them to take immediate action. If the user followed the instructions, including entering a PIN or scanning a QR code, their Signal accounts were linked to an external device controlled by the hackers.
About this happening: A suspected Russia-linked phishing campaign on Signal compromised about 300 political-sphere accounts, exposing chats, ongoing conversations, and address books. Victim...
Latest development: 12.05.2026 22:40
Signal introduced new in-app confirmations, warning messages, and educational prompts to help users resist phishing and social engineering attempts, including bogus Signal Support lures and requests to scan QR codes or share registration codes, PINs, or recovery keys.
NCSC alert on messaging-app targeting of high-risk individuals
Public Sector Action
H score30
First: 02.04.2026 17:15
Last: 02.04.2026 17:15
Sources 1
About this happening:
The UK National Cyber Security Centre (NCSC) issued a March 31 alert warning that Russia-based actors were targeting high-risk individuals through messaging apps,...
NCSC alert on messaging-app targeting of high-risk individuals
Public Sector ActionAbout this happening: The UK National Cyber Security Centre (NCSC) issued a March 31 alert warning that Russia-based actors were targeting high-risk individuals through messaging apps,...
WhatsApp anti-scam protections now warn on fraudulent device-linking requests
Security Tool/Service
H score14
First: 26.03.2026 16:06
Last: 26.03.2026 16:06
Sources 1
About this happening:
WhatsApp rolled out anti-scam protections that warn users when device-linking requests look suspicious, adding a new user-facing control against fraudulent account-l...
WhatsApp anti-scam protections now warn on fraudulent device-linking requests
Security Tool/ServiceAbout this happening: WhatsApp rolled out anti-scam protections that warn users when device-linking requests look suspicious, adding a new user-facing control against fraudulent account-l...
Timeline
-
28.04.2026 13:54 2 articles · 2mo ago
BfV and BSI public warning on Signal phishing
Initial DisclosureIn February 2026, BfV and BSI issued an early warning after a Signal phishing campaign began reaching politically exposed users. The action included direct outreach to some politicians and highlighted the risk of account linkage to an attacker-controlled device.
Show sources
- Germany Suspects Russia Is Behind Signal Phishing That Targeted Top Officials — www.securityweek.com — 28.04.2026 13:54
- Germany Suspects Russia Is Behind Signal Phishing That Targeted Top Officials — www.securityweek.com — 28.04.2026 13:54