Russian State-Aligned Threat Actors Targeting Signal Messenger Accounts

The Google Threat Intelligence Group (GTIG) has observed an increase in efforts by several threat actors aligned with the Russian state to compromise Signal Messenger accounts used by individuals of interest to Russian intelligence services. This new threat is likely motivated by wartime needs to access sensitive government information. Users of Signal Messenger, particularly those involved in governmental or sensitive activities, are affected. The impacts include risks of compromise to sensitive data and personal security. It is recommended that users strengthen their security by using strong passwords and enabling two-factor authentication.