​​Spyware Allows Cyber Threat Actors to Target Users of Messaging Applications​

CISA reports multiple cyber threat actors actively using commercial spyware to target users of mobile messaging applications including Signal and WhatsApp. Attackers employ sophisticated tactics including phishing QR codes, zero-click exploits, and platform impersonation. Current targeting focuses on high-value individuals including government officials, military personnel, and civil society organizations across the United States, Middle East, and Europe. The campaigns use social engineering to gain unauthorized access and deploy additional malicious payloads on mobile devices.