tech
US offers $10 million for info on group behind Signal and WhatsApp hacking spree
Operation by two Russia-state groups has been ongoing since at least March.
TL;DR
- US authorities are offering up to $10 million for information identifying or locating Russian state cyber groups UNC5792 and UNC4221.
- These groups have compromised thousands of Signal and WhatsApp accounts belonging to investigative reporters and US government employees.
- Attacks involve phishing campaigns that trick users into linking devices or providing verification codes and account passcodes.
- The campaign has evolved to request backup encryption passcodes, granting access to past Signal conversations.
- UNC5792 is associated with Russian Federal Security Service (FSB) Border Guards, and UNC4221 works for Russian military services.
- Users are advised that legitimate support services will not request verification codes or send links to "verify" or "restore" accounts.