JAKARTA - Russian-backed hackers have launched a global cyber campaign to gain access to Signal and WhatsApp accounts used by government officials, military personnel, and journalists, warned two Dutch intelligence agencies on Monday, March 9.
Users are persuaded through chats initiated by hackers to provide security verification codes and PINs, allowing hackers to take over personal accounts as well as group chats, the Dutch Intelligence Agency (AIVD) and the Dutch Military Intelligence and Security Service (MIVD) said in a joint statement.
"Russian hackers have likely gained access to sensitive information," the two agencies said.
"Targets and victims of this campaign include Dutch government employees as well as journalists. Instant messaging apps that offer end-to-end encryption such as Signal and WhatsApp are popular among government officials to share confidential or classified information, making them "an ideal place for bad actors to steal sensitive information," they added.
WhatsApp, in response to Reuters, stressed that users should never share their six-digit code with anyone, and the company continues to develop ways to protect users from online threats.
Signal could not immediately be reached for comment.
How Hackers Carry Out Attacks
Hackers most often disguise themselves as a Signal support chatbot (Signal Support) to persuade targets to provide the code, so they can control the account. Another method involves the "linked devices" function in Signal.
Signs that an account may have been compromised include contacts appearing twice in a user's contact list, or a number being displayed as "account deleted".
"The Dutch government has issued a cyber warning to government colleagues and provided assistance to eliminate the threat," said a spokesperson for the joint operation with the AIVD.
"Although they have end-to-end encryption options, messaging apps such as Signal and WhatsApp should not be used as channels for confidential information, state secrets, or sensitive information," said MIVD Director, Rear Admiral Peter Reesink.
The English, Chinese, Japanese, Arabic, and French versions are automatically generated by the AI. So there may still be inaccuracies in translating, please always see Indonesian as our main language. (system supported by DigitalSiber.id)
