FBI, CISA warn of Russian hackers hijacking Signal and WhatsApp accounts

2026-03-24T20:51:54Z6fe2796b41cdfb60c338a45ead1177007317e17a10a39914ba375418da6621e4
accessibility-abuseaccount-hijackingai-deepfakeandroid-securitybiometric-trackingcrypto-phishing','tax-fraud','font-rendering-attack','ai-manipipdeepfakefake-app-storesfake-shopsfriendlydealergoogle-advanced-flowinfostealerphishingpurehvncrussian-actorsscam-compoundsseo-poisoningsideloadingsignalsocial-engineeringstate-sponsoredvidarvideo-call-scamswhatsappzombie-zip

What happened

A Malwarebytes roundup (Mar 2026) covering multiple active threats and scams: FBI/CISA and European agencies warn of a large-scale social-engineering campaign (attributed to Russian actors) hijacking Signal and WhatsApp accounts; deepfake-enabled video-call scams and scam compounds hiring people to supply AI-generated faces; and a sprawling ecosystem of fake app stores, fake shops and crypto-phishing sites. Other notable items include PureHVNC distribution via fake Google Forms job offers, Vidar infostealer pushed from compromised sites, the Zombie ZIP technique evading initial AV scans, state

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
malwarebytes_labs
Record identifier
6fe2796b41cdfb60c338a45ead1177007317e17a10a39914ba375418da6621e4
Enrichment time
2026-03-24T20:51:54Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.