MIVD Warns: Russian Hackers Target Signal and WhatsApp Accounts, Making Encryption Insufficient

Post date: March 13, 2026 · Discovered: April 23, 2026 · 4 posts, 0 comments

Dutch intelligence services (MIVD and AIVD) issued alerts regarding a global cyber campaign. The threat targets individual user accounts on popular apps like Signal and WhatsApp, not the applications themselves. Officials stress that these platforms should never handle classified or sensitive state communications.

Commenters are focused on the mechanics of the attack. 'kingofras' repeatedly hammered home that these exploits target user accounts by exploiting 'legitimate security features.' Another warning repeated by 'randomname' was absolute: never trust QR codes or links received via the apps, and always verify details through a separate channel like a phone call or email.

The clear consensus is that the threat requires operational security, not just software assurances. Compromise demands immediate action: if an account is suspect, users must warn contacts via an out-of-band method, as stressed by both official advisories and users like 'kingofras'.

Key Points

#1Attacks exploit user accounts, not app vulnerabilities.

This is the prevailing technical understanding, reinforced by 'kingofras' stating the attacks target individuals, not the code of Signal or WhatsApp.

#2Messaging apps are insufficient for sensitive data.

MIVD Director Peter Reesink's advice, cited by 'kingofras', mandates that classified information stays off these apps.

#3Zero-Trust Verification is Mandatory.

Users must verify any suspicious communication (links, requests) through a different, trusted channel like email or a direct phone call.

#4Incident Response Requires Out-of-Band Communication.

If compromise is suspected, the immediate response is to warn all contacts using a method completely separate from the potentially compromised app.

Source Discussions (4)

This report was synthesized from the following Lemmy discussions, ranked by community score.

119
points
Russia targets Signal and WhatsApp accounts in cyber campaign | AIVD
[email protected]·7 comments·3/9/2026·by kingofras·english.aivd.nl
45
points
Russia targets Signal and WhatsApp accounts in cyber campaign | AIVD
[email protected]·4 comments·3/9/2026·by kingofras·english.aivd.nl
27
points
Russia targets Signal and WhatsApp accounts in cyber campaign, Dutch Intel finds
[email protected]·1 comments·3/13/2026·by randomname·english.aivd.nl
11
points
Russia targets Signal and WhatsApp accounts in cyber campaign, Dutch Intel finds
[email protected]·0 comments·3/13/2026·by randomname·english.aivd.nl