Russian Hackers Are Targeting WhatsApp and Signal. Here's What to Do.

What Happened

The U.S. State Department just announced a $10 million bounty for information on Russian hacking groups targeting WhatsApp and Signal users. Two Russia-linked groups, UNC5792 and UNC4221, have been tricking people into handing over access to their private messaging accounts. While their main targets have been government officials and military personnel, the techniques they're using work on anyone.

The Details

These hackers aren't breaking into phones with sophisticated code. They're using something much simpler: social engineering. That means they trick people into giving them access willingly.

Here's how it typically works. The hackers pretend to be someone you might trust, like a tech support person, a colleague, or even a friend. They might send you a message saying your account has a security problem. Then they ask you to click a link, scan a QR code, or share a verification code that was just texted to you. Once you do that, they can take over your account.

The scary part is how convincing these messages can be. They often look identical to real messages from WhatsApp or Signal. They create urgency, making you feel like you need to act fast or lose your account. That pressure is exactly what makes these scams work.

Who Is Affected

While these particular Russian groups focused on government workers, the methods they pioneered are now being copied by scammers everywhere. If you use WhatsApp or Signal, you're a potential target. Period.

Families should be especially concerned. Your group chats contain photos of your kids, your home address in shared locations, and conversations about your daily routines. That's exactly the kind of information criminals want. Seniors are often specifically targeted because scammers assume they're less familiar with these tactics.

What You Should Do Right Now

1. Turn on two-step verification in WhatsApp right now. Open WhatsApp, go to Settings > Account > Two-step verification, and set a six-digit PIN. This adds a layer of protection even if someone gets your verification code.

The Bigger Picture

This case shows how techniques developed by state-sponsored hackers eventually become everyday threats for regular people. What starts as espionage becomes the playbook for common criminals. The good news is that awareness and simple security steps can protect you. Staying informed about these threats isn't paranoia. It's basic digital hygiene in 2025.

How GetCyberRight Can Help

Our GCR Scam Guard tool is designed specifically to help families spot these social engineering tactics before they work. It analyzes messages and links to identify common phishing patterns, including the tricks these Russian groups popularized. Think of it as a second pair of expert eyes watching out for your family's digital safety.