US offers $10 million for info on group behind Signal and WhatsApp hacking spree

In a significant move to combat cyber threats, federal authorities have announced a reward of up to $10 million for information that can help identify or locate a Russian state-sponsored hacking group. This group is responsible for compromising thousands of accounts on popular messaging platforms Signal and WhatsApp, specifically targeting investigative journalists and U.S. government personnel. The hacking operation has been traced back to at least March when the FBI issued a warning regarding ongoing phishing campaigns aimed at high-profile individuals. These attacks, attributed to Russian intelligence, often involve messages disguised as automated support communications. Users are tricked into clicking malicious links or providing sensitive verification codes, leading to unauthorized access to their accounts. Once a user falls victim to these tactics, attackers can gain access to new messages while being blocked from viewing previous conversations due to Signal's built-in security features. The campaign primarily targets individuals deemed of high intelligence value, including former and current government officials, military personnel, political figures, and journalists. Recently, the FBI provided an update indicating that the tactics employed by the hackers have evolved. In addition to impersonating support bots, these messages now also instruct users to back up their previous communications. A subsequent message prompts victims to share their long encryption passcode used for securing backups stored on Signal's servers, thus granting attackers further access to past conversations. The FBI has tracked two specific Russian hacking groups involved in this activity, labeled as UNC5792 and UNC4221. As part of their response, Signal has updated its Terms of Service and Privacy Policy, introducing mandatory two-factor verification to enhance user security. Users are encouraged to set up Signal backups and follow the outlined steps to ensure their data remains safe. Signal emphasizes its commitment to providing a secure messaging platform with end-to-end encryption and urges users to remain vigilant against these phishing attempts. For any inquiries, users can refer to the help section within the app.