The US State Department has announced a $10 million reward for information leading to the identification or capture of members of two Russian state-backed hacking groups behind a phishing campaign targeting Signal and WhatsApp users. This move escalates the cyber conflict between Washington and Moscow, aiming to protect sensitive communications used by government officials, military personnel, and journalists.
As reported by Ars Technica, the FBI launched an investigation last March into phishing attacks that have compromised thousands of accounts. The attacks focus on high-value individuals, including current and former US government officials, military personnel, political figures, and journalists. Fraudulent messages masquerade as automated support communications, asking users to click a link or provide verification codes. Once the victim complies, they unknowingly link the attacker's device to their account, losing control of their communications.
Sponsored Protocol
The two Russian threats: UNC5792 and UNC4221
The FBI attributes the attacks to two groups tracked as UNC5792 and UNC4221. US officials state that the first group is associated with the Russian Federal Security Service's Border Guards, while the second operates on behalf of Russian military intelligence (GRU). Both groups attempt to bypass Signal's protections that prevent linked devices from accessing past conversations by tricking victims into creating a backup and sending them the recovery key, thereby circumventing the app's cryptographic defenses.
Sponsored Protocol
The State Department's Rewards for Justice program offers up to $10 million for information leading to the identification or location of these hackers. Tips can be submitted through the program's official website. This initiative fits into a broader context of geopolitical tensions, with the United States intensifying sanctions and legal actions against Russian cyber threats. Previously, the US government imposed similar restrictions on other state actors, such as the sanctions on Anthropic's AI models later revoked by the Trump administration, an episode demonstrating the complexity of political and technological relations.
Sponsored Protocol
Alongside this, cases like the $2.25 million fine against Amazon for identity theft show authorities' commitment to combating online fraud, albeit on a different scale. The bounty for Signal and WhatsApp hackers represents a step forward in protecting encrypted communications, which are increasingly targeted by sophisticated attacks.
For further details, consult Ars Technica's full report and official State Department resources. Digital security is a top priority, and initiatives like this aim to deter future attacks against private communication tools.
