US officials and other individuals deemed to have “high intelligence value” are currently being targeted by Russian hackers on the encrypted messaging app Signal, with “thousands” of accounts reportedly compromised, according to an alert issued on Friday by FBI Director Kash Patel.
“The FBI has identified cyber actors associated with Russian Intelligence Services who are targeting users of commercial messaging applications, such as Signal,” Patel announced in a statement on X.
The campaign, as explained by the FBI director, is primarily aimed at individuals with significant intelligence value, including current and former US government officials, military personnel, political figures, and journalists. “Globally, this effort has led to unauthorized access to thousands of individual accounts,” he noted.
Once they gain access, these Russian actors have the capability to view messages and contact lists, impersonate the victim to send messages, and use the compromised account to conduct phishing attacks, Patel highlighted.
An advisory detailing this threat emphasized that while the hackers specifically target Signal accounts, they can employ similar techniques against other commercial messaging apps as well.
The hackers have been infiltrating accounts by sending messages that “pose as automated support accounts” of commercial messaging apps. These messages trick targets into performing actions like clicking on links or providing verification codes and account PINs.
A âfull account takeoverâ is possible if users perform the requested actions, the FBI and Cybersecurity and Infrastructure Security Agency (CISA) warned in the PSA.Â
The National Security Agency (NSA) previously warned the Department of War about the risks of using Signal, specifically citing the threat of Russian hacking groups that actively attack the app, CBS reported last year.
Several top Trump administration officials â including Vice President JD Vance and War Secretary Pete Hegseth â used the app to discuss military strikes against the Houthi rebels in Yemen last year in group chat that was accidentally shared with a journalist.
