Former Germany’s foreign intelligence VP hit in Signal account takeover campaign

Former Germany’s foreign intelligence VP Arndt Freytag von Loringhoven was targeted in a Signal account takeover, with attackers using his compromised account to send a malicious link to contacts; he advised recipients not to open it and deleted his account. The incident is described as part of a wider wave hitting officials and politicians in Germany, with high‑ranking politicians reporting themselves as victims and security officials also attacked, according to SPIEGEL.

Investigators believe the case is tied to ongoing hybrid campaigns linked to Russia, a view echoed by authorities who warned Signal users to check for suspicious signs such as unfamiliar devices or prompts to re‑register. Signal said the incidents were targeted phishing attacks and stressed that its encryption and infrastructure were not compromised and remain secure, in a statement on X.

Dutch intelligence agencies warned in early March of a global campaign by Russia‑linked actors aiming to compromise Signal and WhatsApp accounts used by dignitaries, military personnel and civil servants.