CISA Warns of Spyware Targeting Messaging App Users

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about the use of commercial spyware targeting users of mobile messaging apps like WhatsApp and Signal. CISA highlighted that cyber actors employ advanced targeting and social engineering techniques to deliver spyware, which can compromise mobile devices. The agency noted incidents involving zero-day and zero-click exploits, with specific examples of attacks on Apple and Samsung devices.

CISA also mentioned Russian threat actors exploiting Signal's features for real-time spying and the use of disguised spyware applications. The agency emphasized that high-value individuals, including government officials and civil society members, are often targeted. CISA recommends at-risk users to review its updated guidance on mobile communications security.