Dutch intelligence agencies have warned that Russian-linked hackers are targeting accounts on popular messaging platforms such as Signal and WhatsApp in an ongoing cyber-espionage campaign.
The alert came from the General Intelligence and Security Service (AIVD) and the Military Intelligence and Security Service (MIVD). The agencies said the attackers have tried to access accounts belonging to government officials, journalists, and other high-value targets.
Dutch intelligence officials said the campaign targets individuals who handle sensitive information. These include government staff, defence personnel, and journalists who often use encrypted messaging apps for communication.
Investigators found that some Dutch officials had already been targeted. Authorities believe the campaign extends beyond the Netherlands and could involve users in multiple countries.
Officials say the attackers likely want access to private chats, professional conversations, and group discussions that may contain politically or strategically valuable information.
The agencies stressed that the attackers have not broken the encryption used by the messaging apps. Instead, they rely on deception.
The attackers pose as tech support services or users’ contacts and ask for verification codes. In some cases, users receive QR codes from attackers who want to connect their own devices to the victims' accounts.
Once a device is connected to a user’s account, attackers can read messages sent to that device without the user's knowledge.
Dutch intelligence agencies advised users to be cautious when dealing with login requests or verification messages.
The agencies told users not to share verification codes with anyone. They also told them to keep a watchful eye on connected devices and disconnect any unfamiliar ones.
This warning shows how concerned they are about cyber-espionage cases in which messaging services are being targeted globally.