Dutch intelligence: Russian state hackers target Signal and WhatsApp accounts
Mar 9th 2026
Dutch intelligence services say hackers impersonate support bots to steal verification codes and seize accounts of officials, military personnel, journalists and others, and they urge users to verify contacts and remove compromised accounts.
- Dutch AIVD and MIVD confirmed Russian state actors are attempting to access Signal and WhatsApp accounts worldwide.
- Attackers impersonate Signal support chatbots to obtain verification codes and PINs.
- Hijacked accounts can be read, used to join group chats, and linked to devices for remote surveillance.
- Agencies say the campaign targets individual accounts rather than vulnerabilities in the messaging apps.
- AIVD and MIVD warned that end to end encrypted apps are not suitable for classified information.
- Advisory: verify suspicious or duplicate accounts, report concerns to IT, remove compromised accounts from groups, and recreate groups if an administrator is compromised.