FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks

2026-03-22T07:24:14Zb46c72b553ecf316579f4eab88cfd22001ccaf6073156609a77650498bae23a8
android-malwarebyovdcanisterwormcisacisco-fmcdarkswordedr-killerespionagegithub-actionsinterlockios-exploit-kitiot-botnetknown-exploited-vulnerabilitymagentomessaging-appsperseus','magecartphishingransomwareremote-code-executionsignalsupply-chaintelnetdtrivyunauthenticated-rcewhatsapp

What happened

A batch of high-impact cybersecurity events: Russian intelligence‑linked actors are conducting mass phishing campaigns to compromise messaging apps (Signal, WhatsApp); multiple critical, actively exploited vulnerabilities were disclosed (including Oracle Identity Manager unauthenticated RCE and Cisco FMC deserialization exploited by Interlock ransomware). Supply‑chain attacks hit the Trivy ecosystem twice — one leading to a self‑propagating CanisterWorm across npm packages and another hijacking GitHub Actions to steal CI/CD secrets. Researchers and vendors also reported critical unauth RCEs (e

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
the_hacker_news
Record identifier
b46c72b553ecf316579f4eab88cfd22001ccaf6073156609a77650498bae23a8
Enrichment time
2026-03-22T07:24:14Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.