Threat Actor

Russian Intelligence (Signal phishing campaign)

Properties

summary
Russian intelligence operators expanded their phishing campaign against Signal accounts by coaxing targets into surrendering their Signal Backup Recovery Keys, enabling persistent account access.
first_seen
2026-06-29T04:00:25.458760+00:00
last_seen
2026-06-29T04:00:25.458760+00:00
created_at
2026-06-29T04:00:25.458760+00:00
mention_count
1
evidence_url
https://thehackernews.com/2026/06/fbi-warns-russian-intelligence-hackers.html
target
Government and military officials using Signal messaging app
provenance
news-scan
scan_confidence
0.85
suspected_origin
Russia
status
pending

Explore this actor's full graph with Ninja Signal

Russian Intelligence (Signal phishing campaign) — Threat Actor Profile — Ninja Signal | Ninja Signal