Russian Hackers Phish EU Officials Over Messaging Apps

Russian state-sponsored hackers are increasingly using messaging apps like WhatsApp and Signal to spear-fish EU government officials, bypassing traditional email security measures. The attacks, targeting high-ranking individuals in military, diplomacy, and politics across multiple EU nations, involve sophisticated social engineering tactics, including impersonating support teams and utilizing QR codes. Despite efforts by EU governments to transition to secure internal messaging systems (like France's Tchap), attackers are exploiting the lack of a standardized secure communication platform, leading to significant breaches and ongoing threats. The trend highlights a shift in tactics by Russian, Chinese, and Iranian threat actors, leveraging alternative channels to evade security monitoring and maintain communication with targets.