Russian hackers have learned to spy for the Armed Forces through Signal: How do they succeed - Google

Hackers are aimed at accessing the correspondence of the Armed Forces fighters and obtaining personal data. To break the messengers, use harmful QR codes. Threat details are referred to in the message that appeared in Google Cloud. The author of the material about Cyber ​​Threats of the Russian Federation is the manager of the Google Cloud Cyber ​​Cloud Dan Black (Dan Black), who posted similar warnings on the social network X (Twitter).

The article states that hackers working in the Russian state threaten Signal users and other messengers. At the same time, they aim at the military of the Armed Forces, but later these practices will spread to others. The specialist described the dangers that they found on Google and immediately advised to update the applications that strengthened protection against penetration. GTIG analytics lists the ways in which Russian hackers penetrate Signal.

Similar threats are in WhatsApp and Telegram, clarified in the article. The main way used by cybercriminals is the abuse of "related devices" in Signal. To do this, generate fake QR codes that replace real references to joining. When a person scans the code, his or her device is associated with the offender's device and he will see all the messages that will come, for example, to the Ukrainian military, explained on Google.

What methods are used by the Russian hackers to carry out a phishin campaign through Signal: the article gave an example of a real software code and fake used by Russian hackers. They also cited the screen of the Nettle and QR code, which allows the GRU to penetrate the user's messenger.