A new warning from Dutch intelligence agencies says Russian-backed hackers are targeting private messaging apps used by officials, journalists, and military personnel across the globe.
According to Reuters, authorities in the Netherlands say the cyber campaign focuses on gaining access to accounts on Signal and WhatsApp, two platforms widely used for encrypted communication. According to the General Intelligence and Security Service and the Military Intelligence and Security Service, attackers are tricking users into handing over security codes that allow full access to their accounts.
The agencies said hackers typically initiate conversations with potential targets and pose as customer support representatives.
Users are then persuaded to share verification codes or personal identification numbers that unlock their accounts and private group chats.
“The Russian hackers have likely gained access to sensitive information,” the General Dutch Intelligence Agency (AIVD) and the Dutch Military Intelligence and Security Service (MIVD) said in a joint statement. Officials added that victims include Dutch government employees and members of the press.
Investigators say the attackers most often impersonate a Signal Support chatbot to gain trust and extract login credentials. Another tactic involves exploiting Signal’s linked devices feature, which allows additional devices to connect to a single account.
Once access is granted, hackers may be able to read conversations, monitor group chats, and collect confidential material.
Security officials say users should watch for warning signs such as duplicate contacts or numbers labeled as “deleted account,” which can indicate an account takeover.
Vice-Admiral Peter Reesink, director of the MIVD, also urged caution when using encrypted messaging apps for official communication.
“Despite their end-to-end encryption option, messaging apps such as Signal and WhatsApp should not be used as channels for classified, confidential or sensitive information,” Reesink said.
