The U.S. Department of State is offering up to $10 million for information on UNC5792 and UNC4221, two hacker groups linked to Russian intelligence and military services. The groups have targeted Signal and WhatsApp users, including U.S. and allied officials, by using phishing and fake support messages to steal backup recovery keys and access private communications. #UNC5792 #UNC4221 #FSB #Signal #WhatsApp
Keypoints
- The U.S. State Department announced a reward of up to $10 million for information on UNC5792 and UNC4221.
- UNC5792 is linked to the Russian FSB Border Guards, while UNC4221 works on behalf of Russian military services.
- The groups have used phishing campaigns against Signal and WhatsApp accounts of government, military, and allied personnel.
- Attackers impersonate Signal support to trick victims into revealing backup recovery keys.
- FBI and CISA warned that thousands of messaging app accounts were compromised through these tactics.