Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentials
2026-06-27T19:24:11Z•5725e9cdc5eca85a1562cfcf7c5dd6de1598415d5e3bd14f5e5bfadf4a12e991
backdoorbackup-recovery-keychrome-extensionci/cdcobalt-strikecredential-theftexploited-vulnerabilitiesincident-responselinux-kernelmaldroid/loadermessaging-securitynation-statepatchingphishingprompt-injectionsignalsupply-chain
What happened
A broad set of high-impact security stories: Ukrainian and US agencies say Russian intelligence ran a long campaign using fake support texts and phishing to steal messaging credentials (including coaxing targets to disclose Signal backup recovery keys). Multiple actively exploited and high-severity vulnerabilities were reported (notably Linux pedit COW CVE-2026-46331, DirtyClone CVE-2026-43503, Amazon Q CVE-2026-12957, Cisco Catalyst SD-WAN CVE-2026-20245, and Lantronix CVE-2025-67038). Several malware and supply-chain campaigns were disclosed or observed in the wild (SharkLoader/StrikeShark,M
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 5725e9cdc5eca85a1562cfcf7c5dd6de1598415d5e3bd14f5e5bfadf4a12e991
- Enrichment time
- 2026-06-27T19:24:11Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.