Russian government-backed hackers are targeting users of popular encrypted messaging platforms Signal and WhatsApp in a large-scale cyber campaign, according to a warning issued by Dutch intelligence agencies. The alert highlights growing concerns among security officials that sophisticated cyber espionage groups are attempting to gain access to private communications belonging to government officials, military personnel, and journalists around the world.
The warning was issued jointly by the Netherlands’ intelligence services, which said the campaign appears to be linked to Russian state-backed hackers. Investigators believe the operation is global in scope and aimed at collecting sensitive information from individuals who may be of strategic interest to the Russian government. Authorities said the attackers are particularly focused on people working in government institutions, defence organizations, and media outlets.
Despite the strong encryption used by Signal and WhatsApp, intelligence officials say the hackers are not necessarily breaking the encryption itself. Instead, they are using social engineering techniques to trick users into giving up access to their accounts. These tactics often involve impersonating platform support staff, sending fraudulent messages, or convincing victims to share verification codes and security credentials.
Once attackers gain access to an account, they can read private messages, monitor conversations, and potentially gather confidential information shared in group chats or direct messages. Dutch intelligence agencies warned that compromised accounts could expose sensitive discussions involving diplomatic, military, or political matters. In some cases, attackers may also connect additional devices to an account using the apps linked-device feature, allowing them to secretly monitor conversations without the victim immediately noticing.
Security officials emphasized that encrypted messaging services remain secure at a technical level, but human error and manipulation remain a major vulnerability. Experts say phishing and social engineering attacks are increasingly being used by state-sponsored cyber groups because they are often easier and more effective than attempting to break encryption systems. The warning highlights how even secure platforms can be exploited when users are deceived into granting access.
The Dutch intelligence report also stated that the campaign may already have allowed attackers to obtain sensitive information from targeted individuals. Because messaging platforms are widely used for both personal and professional communication, the compromise of accounts belonging to high-profile individuals could provide valuable intelligence to hostile actors.
Officials are now urging users—particularly those working in government, defence, or journalism—to take additional precautions when using messaging apps. These measures include enabling two-factor authentication, avoiding sharing verification codes with anyone, and carefully reviewing notifications about new devices linked to messaging accounts. Authorities also recommend verifying unexpected messages or requests through trusted channels before responding.
The warning reflects broader concerns about the growing role of cyber operations in international security. Governments increasingly view digital communication platforms as potential targets for espionage, especially during periods of geopolitical tension. As cyber campaigns become more sophisticated, intelligence agencies around the world are emphasizing the need for stronger digital security awareness among users of even the most secure communication tools.
