← Back to Cybersecurity | ← All Articles
Cybersecurity

Three Groups of Foreign Hackers Are Targeting Your Messaging Apps Right Now

Wednesday, May 13, 2026 ⟳ Updated May 14, 02:00 PM DrakX Intelligence · Analyzed & Published Wednesday, May 13, 2026
U.S. government agencies just warned that hackers from Iran and Russia are actively breaking into Signal and WhatsApp accounts to spy on Americans.
⚡ HIGH CONVERGENCE
4 pillars detected
CybersecurityTech Stocks & SemiconductorsGeopolitics & Global EventsSpace & Emerging Tech
⟳ UPDATE #2 Thu, May 14, 02:00 PM UTC

Since the original warning about foreign hackers targeting messaging apps, cybersecurity threats have broadened to include domestic criminal ransomware gangs (malicious software that locks up data until a ransom is paid) attacking hospitals and government institutions. The Medusa ransomware gang has claimed responsibility for attacks on the University of Mississippi Medical Center and a New Jersey county, prompting discussions about designating ransomware groups as terrorist organizations. A government shutdown is now creating additional concerns about hospitals' ability to maintain cybersecurity defenses during this vulnerable period.

Source: Nextgov/FCW, The Record from Recorded Future News, SC Media
⟳ UPDATE Wed, May 13, 04:31 PM UTC

Since the original warning about Iranian and Russian hackers targeting messaging apps, new breaches have emerged across multiple sectors: a French government ID agency exposed 19 million records, a major security company's investigation into Conduent has stalled, and hackers have claimed to steal millions of records from ADT and Medtronic. These incidents suggest that cyber threats extend well beyond messaging apps, affecting government databases, healthcare providers, and security firms themselves.

Source: Cybernews, The HIPAA Journal, SecurityWeek, Help Net Security

Three separate hacking groups are breaking into your messaging apps right now, and U.S. government agencies just sounded the alarm [National Security Agency, CyberScoop, Malwarebytes].

Here's what's happening: Iranian hackers are targeting American government networks and critical infrastructure (power plants, water systems, hospitals). Russian intelligence agents are hijacking Signal and WhatsApp accounts (the encrypted messaging apps millions of people use daily). A criminal hacking group called Scattered Spider is stealing login credentials (usernames and passwords) to break into company networks [Cybersecurity Dive].

Why does this matter? Once hackers get into your messaging app, they can impersonate you, steal your personal data, or use your account to target your friends and colleagues. Think of it like someone stealing your house key—they can walk in whenever they want and look through your stuff.

The scary part: these groups are getting smarter. Russian hackers are using fake login screens that look identical to the real ones. Criminal groups are combining multiple attack methods to break through defenses more easily.

What you should do today:

1. Turn on two-factor authentication (a second code you need to log in, usually sent to your phone). Go into your Signal or WhatsApp settings right now and enable it. This is your strongest defense.

2. Use a unique, strong password for each app and email account. Write them down in a locked notebook if you need to.

3. Never click suspicious links from people you know—attackers send messages pretending to be friends. Call them first to verify.

4. Update your apps immediately when updates appear. Companies patch security holes with each update.

The bottom line: You're in the crosshairs, but you're not powerless. Two-factor authentication stops 99% of hacking attempts. Enable it today on every app that matters.


cybersecurity signal whatsapp ransomware iran russia fbi cisa
// INTELLIGENCE SOURCES
National Security Agency·CyberScoop·Cybersecurity Dive·Malwarebytes
RELATED INTELLIGENCE
Cybersecurity
GitHub Hackers Can Steal Your Login Tokens in One Click
Cybersecurity
Iran's Attacks Expose Gulf Cybersecurity Gaps
Cybersecurity
Russia Targets Ukraine Infrastructure in Escalating Drone Warfare