MEDIUMVulnerability
Global

Russian Threat Actors Continue Signal and WhatsApp Targeting

·Source: Bank Info Security

Updated:

Executive Summary

Thousands of Victims Tricked Into Giving Attackers Account Access, Say Officials Russian military hackers, foiled by end-to-end encryption in Signal and WhatsApp, have compromised thousands of people by tricking them

Analysis

Thousands of Victims Tricked Into Giving Attackers Account Access, Say Officials Russian military hackers, foiled by end-to-end encryption in Signal and WhatsApp, have compromised thousands of people by tricking them into granting direct access to their accounts instead, lately by revealing backup recovery keys and PIN codes, warns a new U.S. government cybersecurity alert.

Indicators of Compromise (2)

URL (1)
https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/russian-threat-actors-continue-signal-whatsapp-targeting-image_small-2-a-32101.jpg
VirusTotalURLhaus
Domain (1)
ismg-cdn.nyc3.cdn.digitaloceanspaces.com
VirusTotalURLhaus
Source Attribution

Originally published by Bank Info Security on Jun 29, 2026.

Related Threats

MEDIUMVulnerabilityNEW

Intesa Sanpaolo migrates core IT systems to Google Cloud infrastructure

Italy's biggest bank, Intesa Sanpaolo, has completed the migration of its core IT systems to Google Cloud infrastructure.

Finextra
MEDIUMVulnerabilityNEW

Cryptohack Roundup: Chinese Fraudster Gets 30 Years in Prison

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/cryptohack-roundup-chinese-fraudster-gets-30-years-in-prison-image_small-7-a-32141.jpg" align=right hspace=4><b>Also: Hollywood Director Jailed for $11M Fraud</b><br>This week, a Chinese fraudster got 30 years, Hollywood director jailed for $11M fraud, Florida crypto scam plea, China jailed five in FX case, South Korea fines Bithu

Bank Info Security
CRITICALVulnerability

NVD CRITICAL: CVE-2024-14037 — Redsea Cloud eHR contains an arbitrary file upload vulnerability that allows una...

Redsea Cloud eHR contains an arbitrary file upload vulnerability that allows unauthenticated attackers to achieve remote code execution by uploading malicious files through the PtFjk.mob servlet endpoint. Attackers can submit a multipart POST request with a JSP webshell disguised using a spoofed image/jpeg Content-Type to bypass the absence of extension and MIME type validation, with the uploaded

CVE-2024-14037
NIST NVD