CISA Warns of Spyware Targeting Messaging Apps

The U.S. Cybersecurity and Infrastructure Security Agency issued an alert on Monday warning smartphone users about cyber threat actors deploying commercial spyware and remote access trojans to infiltrate popular mobile messaging applications, particularly targeting high-value individuals such as government, military, and political officials.

The agency highlighted that these actors employ advanced social engineering tactics, including phishing messages, malicious QR codes, zero-click exploits, and impersonations of legitimate apps, to gain unauthorized access to victims' devices. Once inside a messaging app, the malware can install additional payloads that compromise the entire mobile device, potentially exposing sensitive communications and personal data. According to the advisory, attacks often focus on users of apps like Signal and WhatsApp, with opportunistic targeting that frequently zeroes in on current and former officials, as well as civil society members, across the United States, the Middle East, and Europe.

CISA cited several recent campaigns to illustrate the scope of the threat. These include Russia-aligned groups exploiting Signal's linked-device feature to infect...