The U.S. State Department has announced a $10 million reward for information leading to the identification or location of individuals involved in cyberattacks targeting users of encrypted messaging apps Signal and WhatsApp. This initiative is part of the Rewards for Justice program, aiming to combat cyber threats against U.S. interests.
These attacks have primarily involved phishing campaigns where victims receive messages that appear to be from legitimate support services. These messages prompt users to click on malicious links or provide verification codes, leading to unauthorized access to their accounts. In some instances, attackers have instructed victims to create backups and share recovery keys, further compromising account security.
The Federal Bureau of Investigation (FBI) has been investigating these incidents since March, focusing on campaigns that have compromised thousands of accounts belonging to high-profile individuals, including current and former U.S. government officials, military personnel, political figures, and journalists. The FBI attributes these attacks to two Russian state-backed hacking groups, identified as UNC5792 and UNC4221. UNC5792 is associated with the Russian Federal Security Service’s Border Guards, while UNC4221 operates on behalf of Russian military intelligence.
Encrypted messaging platforms like Signal and WhatsApp are widely used for secure communication, making them attractive targets for cybercriminals and state-sponsored actors. The exploitation of these platforms underscores the ongoing challenges in maintaining digital security and the importance of vigilance among users.
This development highlights the escalating cyber threats posed by state-sponsored actors and the U.S. government’s commitment to countering such activities. Users of encrypted messaging services should remain cautious of unsolicited messages requesting personal information or account credentials and utilize available security features to protect their accounts.
