समीक्षा
The रूसी‑समर्थित हैकर्स have launched a coordinated cyber‑campaign targeting the messaging apps Signal and WhatsApp. The aim is to infiltrate accounts of Dutch government officials, military personnel and journalists, thereby accessing classified or sensitive information.
मुख्य विकास
- Hackers initiate chats masquerading as a Signal Support chatbot and request verification or PIN codes.
- Successful acquisition of security codes allows attackers to control accounts and read private/group chats.
- The AIVD and MIVD confirm that several Dutch government employees and journalists have been compromised.
- Both messaging platforms reiterate that their end‑to‑end encryption remains intact, but warn users against sharing verification codes.
महत्वपूर्ण तथ्य
• The attack exploits phishing tactics, specifically prompting victims to disclose six‑digit verification codes.
• A secondary method involves abusing Signal’s ‘linked devices’ feature, which can silently add a new device once the attacker obtains the code.
• Indicators of compromise include duplicate contacts or numbers labeled as ‘deleted account’ in the victim’s contact list.
• Dutch authorities have issued a cyber advisory, offering assistance to neutralise the threat and advising officials to avoid using these apps for classified communication.
UPSC प्रासंगिकता
Understanding state‑sponsored cyber‑espionage is crucial for GS 2 (Polity & International Relations) as it reflects