Russian Intel Agencies Target Commercial Messaging Apps in Phishing Campaigns
The **Cybersecurity and Infrastructure Security Agency (CISA)** and the **Federal Bureau of Investigation (FBI)** have issued a public service announcement (PSA) regarding ongoing phishing campaigns targeting commercial messaging applications (CMAs). These campaigns, attributed to cyber actors linked to Russian Intelligence Services, aim to compromise individual user accounts, bypassing end-to-end encryption.
## Russian Intel Agencies Target Commercial Messaging Apps in Phishing Campaigns
**CISA** and the **FBI** have released a [Public Service Announcement (PSA)](https://www.ic3.gov/PSA/2026/PSA260320) warning about ongoing phishing campaigns conducted by cyber actors associated with Russian Intelligence Services. These campaigns specifically target commercial messaging applications (CMAs), aiming to compromise individual user accounts by circumventing encryption.
### Targeted Individuals
The targets of these campaigns include current and former U.S. government officials, military personnel, political figures, and journalists. The attackers are not compromising the encryption of the applications themselves, but rather targeting individual accounts through sophisticated phishing techniques.
### Scale of the Attacks
Evidence suggests that these cyber actors have successfully compromised thousands of individual CMA accounts globally. This unauthorized access allows them to view victims' messages and contact lists, send messages, and conduct further phishing attacks against other CMA accounts, expanding the scope of the compromise.
### Recommendations
**CISA** and the **FBI** strongly urge all CMA users to review the PSA, implement recommended cybersecurity best practices, and remain vigilant for any suspicious activity. Staying informed and proactive is crucial in mitigating the risk posed by these persistent and sophisticated phishing campaigns.