German Authorities Warn of State-Sponsored Phishing Attacks on Political and Military Messaging Apps

German political and military personnel are facing sophisticated phishing attacks through messaging services like Signal, according to recent warnings from federal security agencies. Attackers impersonate support teams or chatbots to send fraudulent security warnings, tricking victims into entering personal PINs or scanning QR codes. This enables hackers to register the user's account on a second device, granting them access to read conversations and send messages in the victim's name. Federal authorities suspect these attacks may be orchestrated by foreign states, amplifying concerns about hybrid warfare threats.

The Federal Office for the Protection of the Constitution has highlighted that while these phishing messages have primarily been observed on Signal, similar tactics could target other messaging platforms such as WhatsApp. Interior Minister Alexander Dobrindt has emphasized the growing threat of cyberattacks against German institutions, noting many are linked to groups with ties to state intelligence services and receive substantial financial backing, particularly from Russia and other regions.

In response to these persistent and sophisticated cyber threats, the German Interior Ministry is preparing to establish a new defense center dedicated to countering hybrid threats. The center, under the Federal Office for the Protection of the Constitution, is slated to begin operations later this year, reinforcing Germany's commitment to bolstering national cybersecurity and protecting its political and military communications networks.

Authorities urge individuals targeted by these phishing attempts to report incidents promptly to aid ongoing investigations and mitigation efforts. The emerging cyber threat landscape underscores the critical need for heightened vigilance and enhanced security measures within Germany's political and military spheres.