Phishing Attacks via Signal Target German Politicians: Russian State Actor Suspected

German high-profile politicians and officials have been targeted in an ongoing wave of sophisticated phishing attacks via the Signal messaging app, with suspicions pointing to state-sponsored actors from Russia. Investigations reveal that several federal ministers, including Construction Minister Verena Hubertz (SPD), Family Minister Karin Prien (CDU), and Bundestag President Julia Klöckner (CDU), received phishing messages designed to steal their Signal account credentials.

The Federal Office for the Protection of the Constitution and the Federal Office for Information Security have issued warnings about this campaign, which has been active since February. Attackers impersonate Signal support staff, tricking victims into revealing their personal identification numbers (PINs), thereby gaining unauthorized access to sensitive communications. The NRW Office for the Protection of the Constitution has echoed these concerns, noting that targets include politicians, diplomats, military personnel, journalists, and government officials.

Despite some offices not confirming breaches, government sources cited by 'Spiegel' and official warnings highlight the probable Russian origin of these attacks, seen as a coordinated international espionage operation. Federal Prosecutor Jens Rommel has launched investigations focusing on espionage suspicions.

Security experts warn that victims may often be unaware of compromises, increasing the risk of confidential information interception. The NRW State Parliament member Stefan Engstfeld reported receiving suspicious Signal messages and alerted authorities. Cybersecurity analyst Jörg Schieb advised Signal users to regularly check connected devices and remain vigilant against suspicious messages or links.

This event underscores significant digital security weaknesses in Germany's political landscape, prompting calls for heightened cybersecurity measures to safeguard governmental communication. As these phishing attempts continue, authorities are expanding their investigations to identify and thwart further attacks.