New FBI warning reveals phishing attacks hitting private chats

You astir apt deliberation your messages are safe. After all, apps similar WhatsApp, Signal and Telegram beforehand beardown encryption.

But a caller informing from the Cybersecurity and Infrastructure Security Agency and the Federal Bureau of Investigation shows that attackers bash not request to interruption encryption astatine all.

Instead, they are going aft you.

Sign up for my FREE CyberGuy Report

• Get my champion tech tips, urgent information alerts and exclusive deals delivered consecutive to your inbox.
• For simple, real-world ways to spot scams aboriginal and enactment protected, visit CyberGuy.com trusted by millions who ticker CyberGuy connected TV daily.
• Plus, you'll get instant entree to my Ultimate Scam Survival Guide escaped erstwhile you join.

FBI WARNS ABOUT FOREIGN APPS AND YOUR DATA
 

A caller national advisory says phishing campaigns tied to Russian quality are going aft messaging app users alternatively of trying to interruption encryption. (MStudioImages/Getty Images)

What the FBI and CISA conscionable revealed

According to the associated advisory, cyber actors tied to Russian quality are moving large-scale phishing campaigns targeting messaging apps.

These attacks are not random. They person focused connected high-value targets similar authorities officials, subject unit and journalists. However, the tactics tin easy dispersed to mundane users.

Here is the cardinal takeaway: Hackers are not cracking the apps themselves. They are tricking radical into giving up access. 

How these messaging app attacks really work

This is wherever it gets absorbing and a spot unsettling. Instead of breaking encryption, attackers usage phishing to summation power of idiosyncratic accounts. Once inside, they can:

• Read backstage conversations
• Access interaction lists
• Send messages arsenic if they were you
• Launch caller scams targeting your contacts

It becomes a concatenation reaction. One compromised relationship tin rapidly pb to galore more. In immoderate cases, attackers impersonate trusted contacts. That makes the scam consciousness existent and urgent.

Why encryption is not capable anymore

Encryption inactive matters. It protects messages arsenic they question betwixt devices. But present is the problem. If idiosyncratic logs into your account, they spot everything conscionable similar you do.

That means adjacent the astir unafraid app cannot support you if your login gets compromised. This is simply a displacement successful however cyberattacks work. The weakest nexus is nary longer the technology. It is quality behavior.

AI IS NOW POWERING CYBERATTACKS, MICROSOFT WARNS
 

The FBI and CISA are informing that attackers are targeting users of encrypted messaging apps by tricking them into handing implicit relationship access. (BackyardProduction/Getty Images)

Who is astatine hazard from messaging app phishing attacks

While the advisory highlights high-profile targets, the tactics are not constricted to them.

If you usage messaging apps for:

• Personal conversations
• Work communication
• Sharing delicate information

You are a imaginable target. Phishing works due to the fact that it relies connected elemental mistakes. A speedy pat connected the incorrect nexus is often each it takes. 

What this means for you

This informing highlights a bigger trend. Cyberattacks are becoming much personal. Instead of attacking systems, hackers are targeting radical directly. That makes consciousness your strongest defense. The much you recognize however these scams work, the harder it becomes for attackers to succeed.

Ways to enactment harmless from messaging app phishing attacks

You bash not request to beryllium a cybersecurity adept to support yourself. You conscionable request to dilatory things down and travel a fewer astute habits.

1) Be skeptical of unexpected messages

If a connection feels urgent oregon retired of place, pause. Even if it looks similar it came from idiosyncratic you know.

2) Never click suspicious links

Avoid links sent done messages unless you tin verify them independently. Strong antivirus bundle tin assistance observe suspicious behaviour aft a compromise. Get my picks for the champion 2026 antivirus extortion winners for your Windows, Mac, Android & iOS devices at Cyberguy.com.

3) Turn connected two-factor authentication

Two-factor authentication (2FA) adds a 2nd furniture of extortion adjacent if your password gets exposed.

TECH GIANTS UNITE TO FIGHT ONLINE SCAMS
 

Officials accidental hackers tin work messages, entree contacts and impersonate users erstwhile they summation power of a messaging app account. (FreshSplash/Getty Images)

4) Watch for login alerts

Many apps notify you erstwhile a caller instrumentality signs in. Do not disregard these warnings.

5) Verify requests successful different way

If a interaction asks for thing unusual, telephone them oregon corroborate done different channel.

6) Use a information removal service

Limit however overmuch of your idiosyncratic accusation is disposable online. Data removal services enactment to delete your information from broker sites, making it harder for scammers to people you with convincing phishing messages. Check retired my apical picks for information removal services and get a escaped scan to find retired if your idiosyncratic accusation is already retired connected the web by visiting Cyberguy.com.

7) Keep your instrumentality and apps updated

Install updates regularly. Security patches hole vulnerabilities that attackers tin exploit aft gaining access.

Kurt's cardinal takeaways

Messaging apps consciousness private. They consciousness secure. That consciousness of comfortableness is precisely what attackers are counting on. The exertion is inactive strong. The existent question is whether your habits are keeping up. So the adjacent clip a connection pops up that feels somewhat off, spot that instinct and instrumentality a 2nd look.

Have you ever received a suspicious connection that made you halt and question if it was real? Let america cognize by penning to america at Cyberguy.com.

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

Sign up for my FREE CyberGuy Report

• Get my champion tech tips, urgent information alerts and exclusive deals delivered consecutive to your inbox.
• For simple, real-world ways to spot scams aboriginal and enactment protected, visit CyberGuy.com trusted by millions who ticker CyberGuy connected TV daily.
• Plus, you'll get instant entree to my Ultimate Scam Survival Guide escaped erstwhile you join.

Copyright 2026 CyberGuy.com. All rights reserved.