CISA: Spyware and RATs used to target WhatsApp and Signal Users

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about the use of commercial spyware and remote access trojans (RATs) targeting users of messaging apps like WhatsApp and Signal. CISA reports that threat actors are employing sophisticated social engineering techniques to deliver spyware, which can compromise users' devices.

Attack methods include phishing messages, malicious QR codes, and zero-click exploits, often targeting high-value individuals such as government and military officials. CISA recommends users follow updated best practices for mobile communications to mitigate risks. Recent campaigns highlighted include Russian actors exploiting Signal's features and various spyware impersonating popular apps.