Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentials
2026-06-28T07:24:12Z•78e2cdfe99d22734a95ff7d2eee02daada4aaa3f9e87408fda7b64ecbcac96b7
adblockchrome-extensioncisacobalt-strikecordycepsdirtycloneespionagefbigaslightgithub-actionslinux-kernelmessaging-credentialsmiasmamisticnpmpedit-COWphishingprivilege-escalationrussian-intelligencesharkloadersignalstockstaysupply-chaintinyRCTzero-day
What happened
A multi-story briefing from The Hacker News (June 24–27, 2026) highlights active nation-state espionage, supply-chain and zero-day exploitation, and several high-impact malware/backdoor campaigns. Ukrainian authorities and the FBI attribute a long-running Russian intelligence campaign using fake support texts and targeted phishing to steal messaging credentials (with updated FBI/CISA warnings about attackers coercing Signal Backup Recovery Keys). Multiple bespoke backdoors and loaders were reported (SharkLoader delivering Cobalt Strike, TinyRCT, STOCKSTAY, Mistic, Gaslight) and supply-chain/CI
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 78e2cdfe99d22734a95ff7d2eee02daada4aaa3f9e87408fda7b64ecbcac96b7
- Enrichment time
- 2026-06-28T07:24:12Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.