CISA Emergency Alert: Commercial Spyware Exploiting Zero-Click and Malicious QR Codes to Hijack Messaging Apps

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a nationwide alert regarding the exploitation of commercial spyware targeting users of popular mobile messaging applications. Attackers are employing sophisticated methods, including phishing, malicious QR codes, and zero-click exploits, to compromise accounts of high-risk individuals such as government officials and journalists.

Key techniques include: 1) Phishing and malicious QR codes that link victim accounts to attacker-controlled devices; 2) Zero-click exploits that allow silent installation of spyware without user interaction; 3) App impersonation, where attackers pose as legitimate messaging platforms to trick users into installing malicious software. CISA emphasizes the importance of following updated security guidance to protect against these threats.