Russian hackers and other state-actor threat groups have launched spear-phishing attacks against the messaging accounts of European Union officials [1].
These attacks target the private communication channels of government representatives, potentially exposing sensitive diplomatic intelligence and internal policy discussions to foreign adversaries.
The campaigns specifically targeted Signal and WhatsApp accounts [4]. The attackers used spear-phishing techniques to attempt to hijack or compromise these communications to gain access to intelligence from EU institutions and offices [1], [2].
Reports on the scale of the breaches vary. Some sources indicate there were eight significant phishing incidents targeting EU officials on these platforms [5]. However, other reports state that Russian hackers hijacked thousands of high-intelligence messaging app accounts [4].
EU bodies are now evaluating the security of these third-party platforms. The targeting of encrypted apps suggests that state actors are shifting their focus toward the personal devices and private accounts of officials to bypass official government security protocols [1], [3].
Security agencies have warned that these groups seek to maintain long-term access to communications. By compromising a single account, hackers can often move laterally through a contact list to target other high-ranking officials [2].
The European Union has not yet announced a formal mandate to ban these apps, but the repeated attempts by state actors have prompted officials to consider moving away from commercial messaging platforms for official business [1].
“Russian hackers and other state-actor threat groups have launched spear-phishing attacks against the messaging accounts of European Union officials”
The targeting of encrypted apps like Signal and WhatsApp highlights a critical vulnerability in 'shadow IT,' where officials use non-government approved tools for convenience. Because these apps reside on personal devices, they often lack the rigorous monitoring and security oversight of official government networks, making them an attractive entry point for state-sponsored espionage.
