Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentials

Summary: Ukraine's Security Service (SSU), working with the FBI, said it uncovered a long-running Russian intelligence campaign to break into messaging accounts of government officials, military personnel, politicians, and activists in Ukraine, Europe, and the U.S. Attackers sent SMS messages posing as the messaging platform's support bot and urged users to hand over their account credentials, targeting organizations and personal accounts of Ukrainian nationals alike.
What's compelling: The SSU did not name a specific group, but similar waves against Signal and WhatsApp users have been attributed to Russian clusters tracked as Star Blizzard, UNC5792 (UAC-0195), and UNC4221 (UAC-0185) - and the FBI has separately tied Russian Intelligence Services to a messaging-app phishing campaign aimed at high-value targets' backup recovery keys.

Read the original at The Hacker News ↗