Global Cyber Attack Warning: FBI and Swedish Authorities Target Phishing Campaign on Signal Users

FBI and Swedish authorities issue warnings about a Russian-linked global phishing campaign targeting encrypted messaging app users, focusing on high-profile Swedish government and military personnel.

    Key details

  • • FBI and Swedish authorities warn of a global phishing campaign targeting Signal and WhatsApp users.
  • • Attackers linked to Russian intelligence services focus on government, military, and journalists.
  • • Phishing involves fake SMS to trick users into linking new devices under attackers' control.
  • • Signal is widely used by the Swedish military for secure communications.
  • • CERT-SE advises caution and provides security recommendations for organizations using encrypted apps.

The FBI and Swedish authorities have issued urgent warnings about a global phishing campaign targeting users of encrypted messaging apps, including Signal and WhatsApp, with a particular focus on Swedish government and military communications.

This cyber attack campaign primarily targets high-value individuals such as government officials, military personnel, and journalists. Cyber actors linked to Russian intelligence services are believed to be orchestrating the attack by sending fake SMS messages designed to deceive users into linking new devices to their encrypted messaging accounts. By doing so, attackers gain unauthorized access to private messages and encrypted chat groups.

FBI Director Kash Patel emphasized that the security vulnerability does not lie within the apps themselves but in the user's interaction with phishing messages. "The attackers are not hijacking accounts directly; they are tricking users into connecting devices under their control," Patel explained.

In Sweden, the Civil Defense Agency's CERT-SE has reinforced this warning, highlighting that attackers exploit standard app settings to infiltrate private chats and contacts. Notably, Signal is widely used by the Swedish military as a secure alternative to traditional communication channels, raising the stakes of potential breaches.

Swedish CERT-SE has issued specific security recommendations for organizations relying on encrypted communication, underscoring the importance of vigilance when handling SMS messages and new device connections.

This alert comes amid increasing concerns over cyber espionage and the protection of sensitive government and military data transmitted through encrypted platforms. Authorities urge all users to exercise caution and follow recommended security protocols to mitigate risks.

The situation remains active as investigations continue and officials collaborate to strengthen defenses against this persistent phishing threat.

This article was translated and synthesized from Swedish sources, providing English-speaking readers with local perspectives.

Source comparison

The key details of this story are consistent across the source articles

The top news stories in Sweden

Delivered straight to your inbox each morning.