Spyware Allows Cyber Threat Actors to Target Users of Messaging Applications
All CISA Advisories
Actively Exploited
Summary
CISA has identified that various cyber threat actors are using commercial spyware to target users of mobile messaging applications, employing tactics such as phishing, zero-click exploits, and impersonation. The focus is primarily on high-value individuals including government and military officials, indicating a serious threat to sensitive communications.
Impact
Mobile messaging applications including Signal and WhatsApp.
In the Wild
Yes
Timeline
Ongoing since at least 2025
Remediation
Users are encouraged to review the updated Mobile Communications Best Practice Guidance and Mitigating Cyber Threats with Limited Resources: Guidance for Civil Society for steps to protect mobile communications and messaging apps.