- Dutch intelligence services warn of Russian cyber espionage efforts
- Hackers target Signal and WhatsApp via social engineering
- The campaign has likely already provided sensitive information
The General Intelligence and Security Service (AIVD), the Netherlands’ main civilian intelligence and security agency, has warned of a major cyberespionage campaign carried out by Russian spies.
In a security advisory, the AIVD said it saw Russian state-sponsored hackers embark on a “large-scale global cyber campaign” targeting dignitaries, military personnel and civil servants, including Dutch government employees.
Other high-value figures, such as journalists, could also be targeted, it was added.
Article continues below
Intel already taken
The strategy is social engineering and the goal is to gain access to their targets’ Signal and WhatsApp accounts.
Instead of looking for software vulnerabilities, scammers try to persuade their victims to share security checks and PINs. The two most common approaches are to either spoof the Signal Support chatbot or try to take advantage of the “linked devices” feature.
This feature allows multiple devices to be connected to the same account, allowing spies to read conversations without alerting victims in any way.
The AIVD considers the campaign already a success: “Russian hackers probably gained access to sensitive information through this campaign,” it said, without specifying whether they accessed it from Dutch targets or someone else.
In its opinion, the AIVD also indicates that Russians are most likely interested in Signal and WhatsApp because of their good reputation.
“Signal is known for being a reliable and independent communications channel offering end-to-end encryption. This makes it an attractive channel for governments wanting to protect their internal communications. This also makes it the perfect place for malicious actors trying to capture sensitive information.”
This is why MIVD Director Vice Admiral Peter Reesink advises against using these tools for sharing classified, confidential or sensitive information. We add that it would be wise not to share access to your applications with anyone, especially if you are in a sensitive position.
Via The register
The best antivirus for every budget
Follow TechRadar on Google News And add us as your favorite source to get our news, reviews and expert opinions in your feeds. Make sure to click the Follow button!
And of course you can too follow TechRadar on TikTok for news, reviews, unboxings in video form and receive regular updates from us on WhatsApp Also.
