CISA Warns of Spyware Targeting Messaging App Users

The cybersecurity agency CISA on Monday issued a warning over the use of commercial spyware to target the users of mobile messaging applications such as WhatsApp and Signal.

“Cyber actors use sophisticated targeting and social engineering techniques to deliver spyware and gain unauthorized access to a victim’s messaging app, facilitating the deployment of additional malicious payloads that can further compromise the victim’s mobile device,” CISA said.

The agency has referenced several threats and incidents detailed this year by the cybersecurity industry.

It pointed out that threat actors have leveraged zero-day and zero-click exploits to deliver spyware to targeted users. Examples provided by the agency include attacks conducted via WhatsApp against Apple device users, and Samsung phone owners being targeted with Android spyware named Landfall.

The cybersecurity agency also pointed to attacks in which Russian threat actors exploited Signal’s ‘linked devices’ feature for real-time spying.

CISA’s alert ...