FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks
2026-03-23T01:24:09Z•1a9c18927e91592dedd83bcdce678e35c9c61fe563667306485e69bc9463d8ba
Android banking malwareBYOVD/EDR bypassCI/CD secretsCISA/KEVCanisterWormCisco FMCGitHub ActionsInterlock ransomwareIoT botnetsLangflowMagento PolyShellOracle Identity ManagerRussian intelligenceSignalTrivyUbuntu privilege escalationWhatsAppiOS exploit kit (DarkSword)phishingsupply chaintelnetdunauthenticated RCE
What happened
A broad set of high‑impact security developments: U.S. agencies warn Russian intelligence–linked actors are mass‑phishing to hijack Signal/WhatsApp accounts; Oracle released a patch for a critical unauthenticated RCE (CVE-2026-21992) in Identity Manager; Trivy's ecosystem was hit by supply‑chain compromises (CanisterWorm) and GitHub Actions tag hijacks to steal CI/CD secrets; and multiple critical vulnerabilities are being actively exploited (notably Langflow CVE-2026-33017, Cisco FMC CVE-2026-20131, GNU telnetd CVE-2026-32746). CISA added several actively exploited flaws to its KEV list and U
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 1a9c18927e91592dedd83bcdce678e35c9c61fe563667306485e69bc9463d8ba
- Enrichment time
- 2026-03-23T01:24:09Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.