The US government is offering rewards of up to $10 million for information on individuals tied to UNC5792 and UNC4221, two threat actors linked to Russian intelligence services. These groups have used phishing and account takeover tactics against government officials, military personnel, journalists, and others by abusing secure messaging apps like Signal and WhatsApp. #UNC5792 #UNC4221 #CISA #FBI #Signal #WhatsApp #FSB
Keypoints
- The US is offering up to $10 million for information on UNC5792 actors.
- UNC5792 and UNC4221 are linked to Russian intelligence services.
- The groups target US officials, military leaders, journalists, and Ukrainian officials.
- Attackers use phishing on commercial messaging apps to steal accounts.
- CISA and the FBI warn that Backup Recovery Keys can expose historical messages.