Russian intelligence services fake support SMS messaging-account phishing campaign
Campaign
Summary
Hide ▲
Show ▼
A long-running phishing campaign by Russian intelligence services is stealing messaging-account credentials from officials, military personnel, politicians, and activists across Ukraine, Europe, and the U.S. The operation uses fake support SMS that impersonate a messaging platform's support bot to trick recipients into revealing access details. The activity threatens sensitive military and political communications and extends to Ukrainian personal accounts.
Related Happenings
Russian intelligence Signal recovery-key phishing campaign
Campaign
H score29
First: 29.06.2026 11:15
Last: 29.06.2026 11:15
Sources 1
About this happening:
An active Russian intelligence phishing campaign is impersonating Signal support to steal Backup Recovery Keys, verification codes, and account PINs, putting *...
Russian intelligence Signal recovery-key phishing campaign
CampaignAbout this happening: An active Russian intelligence phishing campaign is impersonating Signal support to steal Backup Recovery Keys, verification codes, and account PINs, putting *...
GreyVibe AI-assisted cyberespionage campaign targeting Ukraine-linked organizations
Campaign
H score39
First: 29.05.2026 01:24
Last: 29.05.2026 01:24
Sources 1
About this happening:
GreyVibe is running an AI-assisted cyberespionage campaign against Ukrainian and Ukraine-related organizations, expanding the threat to military, government, civilian,...
GreyVibe AI-assisted cyberespionage campaign targeting Ukraine-linked organizations
CampaignAbout this happening: GreyVibe is running an AI-assisted cyberespionage campaign against Ukrainian and Ukraine-related organizations, expanding the threat to military, government, civilian,...
Suspected Russia-linked Signal phishing campaign targeting political accounts
Campaign
H score18
First: 28.04.2026 13:54
Last: 28.04.2026 13:54
Sources 1
About this happening:
A suspected Russia-linked phishing campaign on Signal compromised about 300 political-sphere accounts, exposing chats, ongoing conversations, and address books. Victim...
Suspected Russia-linked Signal phishing campaign targeting political accounts
CampaignAbout this happening: A suspected Russia-linked phishing campaign on Signal compromised about 300 political-sphere accounts, exposing chats, ongoing conversations, and address books. Victim...
Latest development: 12.05.2026 22:40
Signal introduced new in-app confirmations, warning messages, and educational prompts to help users resist phishing and social engineering attempts, including bogus Signal Support lures and requests to scan QR codes or share registration codes, PINs, or recovery keys.
BfV and BSI public warning on Signal phishing
Public Sector Action
H score20
First: 28.04.2026 13:54
Last: 28.04.2026 13:54
Sources 1
About this happening:
Germany’s BfV and BSI issued a public warning about a Signal phishing campaign, flagging a likely state-controlled cyber actor and the risk to politicians and...
BfV and BSI public warning on Signal phishing
Public Sector ActionAbout this happening: Germany’s BfV and BSI issued a public warning about a Signal phishing campaign, flagging a likely state-controlled cyber actor and the risk to politicians and...
Bitter Middle East spear-phishing campaign targeting civil society figures
Campaign
H score28
First: 09.04.2026 13:45
Last: 09.04.2026 13:45
Sources 1
About this happening:
A spear-phishing campaign targeted civil society figures in Middle Eastern countries, including three journalists in Egypt and Lebanon, creating account-compromise ris...
Bitter Middle East spear-phishing campaign targeting civil society figures
CampaignAbout this happening: A spear-phishing campaign targeted civil society figures in Middle Eastern countries, including three journalists in Egypt and Lebanon, creating account-compromise ris...
Timeline
-
27.06.2026 20:27 3 articles · 18d ago
Russian intelligence services steal messaging credentials with fake support SMS
Initial DisclosureSSU and FBI said they uncovered a long-running campaign by Russian intelligence services that used fake support SMS texts to trick government officials, military personnel, politicians, activists, and Ukrainian personal-account holders in Ukraine, Europe, and the U.S. into revealing messaging account credentials and other sensitive access details.
Show sources
- Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentials — thehackernews.com — 27.06.2026 20:27
- Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentials — thehackernews.com — 27.06.2026 20:27
- U.S. offers $10 million for hackers targeting WhatsApp, Signal users — www.bleepingcomputer.com — 29.06.2026 18:09