The SSU and the FBI have uncovered large-scale cyberattacks by Russian intelligence services targeting officials’ messaging apps
Cyber experts from the Security Service of Ukraine, in collaboration with the Federal Bureau of Investigation, have exposed Russian intelligence services for carrying out systematic cyberattacks against users of messaging apps in Ukraine, Europe and the US.
The main targets of the attacks included officials, military personnel, politicians and activists. The attackers’ aim was to gain access to sensitive military, political and economic information, as well as to steal personal data.
Russian hackers used various tools and methods to carry out the attacks. One of the most common methods remains the phishing of passwords via SMS messages sent on behalf of so-called support teams.
Such messages are disguised to look like they come from official bots. They are most often sent in the morning, when users may be more vulnerable due to their physical and emotional state.
The SBU emphasised that the attacks are not directed solely against state institutions, officials or public figures. The personal accounts of ordinary Ukrainians are also at risk.
In light of this, the Security Service has urged citizens to strengthen their own digital security and follow basic cyber hygiene rules.
Users are advised to regularly check active sessions in messaging apps and log out of any unknown connections. It is also advisable to enable two-factor authentication and use a complex alphanumeric PIN code.
Separately, the SBU has reminded users that they must not share verification codes, PINs, passwords or account recovery keys with third parties.
Users are also urged not to click on suspicious links, even if they have been sent by contacts they know, as their accounts may have been hacked.
Furthermore, it is not recommended to open files from unknown or dubious chat rooms, especially if the user is asked to do so from a computer.
QR codes received from unknown bots or users pose a particular risk. Attackers can use them to link their device to someone else’s account.
If citizens receive suspicious messages via messaging apps, they are urged to report them to the SBU’s Cybersecurity Situation Centre.
