{"id":56946,"date":"2026-03-09T10:17:57","date_gmt":"2026-03-09T09:17:57","guid":{"rendered":"https:\/\/aboutsignal.com\/?p=56946"},"modified":"2026-04-23T09:44:54","modified_gmt":"2026-04-23T07:44:54","slug":"dutch-aivd-and-mivd-warn-about-phishing-via-signal-and-whatsapp","status":"publish","type":"post","link":"https:\/\/aboutsignal.com\/de\/news\/dutch-aivd-and-mivd-warn-about-phishing-via-signal-and-whatsapp\/","title":{"rendered":"Die niederl\u00e4ndischen Geheimdienste AIVD und MIVD warnen vor Phishing \u00fcber Signal und WhatsApp"},"content":{"rendered":"\n

The Dutch AIVD and MIVD warn about phishing by Russian state hackers via the chat apps Signal and WhatsApp. The intelligence services emphasize<\/a> that this is not due to the technology or security of the apps, but rather to the actions of the users themselves.<\/strong><\/p>\n\n\n\n

The threat targets individual user accounts, such as those of dignitaries, military personnel, and civil servants. Journalists can also be considered interesting targets, according to the AIVD.<\/p>\n\n\n\n

To gain access to accounts, attackers try to obtain users\u2019 verification and PIN codes. The most common method is for hackers to impersonate a Signal Support chatbot and ask for your codes. However, Signal Support does not have a Support chatbot and never contacts users via the app.<\/p>\n\n\n\n

Another phishing method involves attackers trying to get users to scan QR codes or click on links, while the QR code actually links the attacker\u2019s device to the victim\u2019s account.<\/p>\n\n\n\n

In both cases, the compromise relies on a manual action by the user. The agencies emphasize that this concerns the compromise of individual accounts and does not mean that the Signal or WhatsApp applications themselves have been compromised.<\/p>\n\n\n\n

Signal targeted especially because of its good reputation<\/h2>\n\n\n\n

Phishing attempts are a problem for all online services. The intelligence services believe the high Russian interest in Signal is explained by the app\u2019s strong reputation: \u201cSignal is known as a reliable and independent communication tool and offers the option to send end-to-end encrypted messages. Because of this, it is widely used within governments to protect internal communication,\u201d according to the AIVD<\/a>.<\/p>\n\n\n\n

The AIVD has published a so-called cyber advisory<\/a> with tips on how users can protect themselves against malicious actors.<\/p>\n\n\n\n

Signal also provides guidance on an official support page about how to protect yourself on Signal<\/a> and you can also read our detailed article: Phishing attempts on Signal \u2013 How they work and how to protect yourself<\/a>.<\/p>\n\n\n\n

Signal has already responded to worldwide phishing attempts on platforms including Bluesky<\/a>, Mastodon<\/a> en X<\/a>.
<\/p>\n\n\n\n

We are aware of recent reports regarding targeted phishing attacks that have resulted in account takeovers of some Signal users, including government officials and journalists. We take this very seriously. 1\/7<\/p>— Signal (@signal.org<\/a>) 9 maart 2026 om 17:12<\/a><\/blockquote>