<!-- mobian-agent-page publisher="dailydev" canonical="https://daily.dev/posts/signal-phishing-and-russian-intelligence-targeting-messaging-apps-cqkn6o6va" -->

---
title: Signal Phishing and Russian Intelligence Targeting...
description: Russian intelligence services (UNC5792) are targeting Signal, WhatsApp, and Telegram users through phishing, QR code tricks, linked-device abuse, and backup...
canonical: https://daily.dev/posts/signal-phishing-and-russian-intelligence-targeting-messaging-apps-cqkn6o6va
twitter:card: summary_large_image
twitter:site: @dailydotdev
og:type: website
og:site_name: daily.dev
og:title: Signal Phishing and Russian Intelligence Targeting Messaging Apps | daily.dev
og:description: Russian intelligence services (UNC5792) are targeting Signal, WhatsApp, and Telegram users through phishing, QR code tricks, linked-device abuse, and backup...
og:url: https://daily.dev/posts/signal-phishing-and-russian-intelligence-targeting-messaging-apps-cqkn6o6va
og:image: https://api.daily.dev/og/posts/CqkN6o6va.png
og:image:alt: Signal Phishing and Russian Intelligence Targeting Messaging Apps
og:image:width: 1200
og:image:height: 630
og:locale: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Signal Phishing and Russian Intelligence Targeting Messaging Apps

**[Security Boulevard](https://daily.dev/sources/securityboulevard)** · 3 min read · 0 upvotes · 0 comments

## Summary

Russian intelligence services (UNC5792) are targeting Signal, WhatsApp, and Telegram users through phishing, QR code tricks, linked-device abuse, and backup recovery key theft — without breaking encryption. The FBI issued a PSA warning about these tactics, and the US government is offering a $10 million Rewards for Justice bounty for information on the threat actors. The key takeaway: encrypted messaging apps can be secure at the transport layer while account recovery paths and endpoints remain exploitable weak links. Practical advice covers QR-code phishing awareness, endpoint hygiene, and how to respond when 'support' requests recovery keys or codes.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://securityboulevard.com/2026/07/signal-phishing-and-russian-intelligence-targeting-messaging-apps>

## Similar posts on daily.dev

- [FBI says Russian spies now trick Signal users into handing over their backup recovery key](https://daily.dev/posts/fbi-says-russian-spies-now-trick-signal-users-into-handing-over-their-backup-recovery-key-jzexwxtct) · The Next Web · 0 upvotes · 0 comments
- [FBI: Russian hackers now target Signal backup recovery keys](https://daily.dev/posts/fbi-russian-hackers-now-target-signal-backup-recovery-keys-wto8mjgyk) · BleepingComputer · 0 upvotes · 0 comments
- [U.S. Offers $10 Million for Hackers Targeting WhatsApp and Signal Users](https://daily.dev/posts/u-s-offers-10-million-for-hackers-targeting-whatsapp-and-signal-users-wntw9hted) · Security Boulevard · 0 upvotes · 0 comments
- [Russian Hackers Phish EU Officials Over Messaging Apps](https://daily.dev/posts/russian-hackers-phish-eu-officials-over-messaging-apps-2y4i8drsd) · Dark Reading · 0 upvotes · 0 comments

---

Tags: [#security](https://daily.dev/tags/security), [#phishing](https://daily.dev/tags/phishing)

[View this post on daily.dev](https://daily.dev/posts/signal-phishing-and-russian-intelligence-targeting-messaging-apps-cqkn6o6va)

```json
{"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]}
{"@context":"https://schema.org","@type":"TechArticle","headline":"Signal Phishing and Russian Intelligence Targeting Messaging Apps","url":"https://daily.dev/posts/signal-phishing-and-russian-intelligence-targeting-messaging-apps-cqkn6o6va","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/signal-phishing-and-russian-intelligence-targeting-messaging-apps-cqkn6o6va"},"datePublished":"2026-07-13T05:38:38.665Z","dateModified":"2026-07-13T05:39:01.023Z","description":"Russian intelligence services (UNC5792) are targeting Signal, WhatsApp, and Telegram users through phishing, QR code tricks, linked-device abuse, and backup...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8fe9eeb967de205fd6743e2535f16178?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/8fe9eeb967de205fd6743e2535f16178?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Security Boulevard","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Security Boulevard","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/3613c832180040de8d85bb29f74395be","url":"https://daily.dev/sources/securityboulevard"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/signal-phishing-and-russian-intelligence-targeting-messaging-apps-cqkn6o6va","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,phishing","timeRequired":"PT3M"}
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Security Boulevard","item":"https://daily.dev/sources/securityboulevard"},{"@type":"ListItem","position":3,"name":"Signal Phishing and Russian Intelligence Targeting Messaging Apps"}]}
```

