Back to all threats

​​Spyware Allows Cyber Threat Actors to Target Users of Messaging Applications​

All CISA Advisories
Actively Exploited

Summary

CISA has identified that various cyber threat actors are using commercial spyware to target users of mobile messaging applications, employing tactics such as phishing, zero-click exploits, and impersonation. The focus is primarily on high-value individuals including government and military officials, indicating a serious threat to sensitive communications.

Impact

Mobile messaging applications including Signal and WhatsApp.

In the Wild

Yes

Timeline

Ongoing since at least 2025

Remediation

Users are encouraged to review the updated Mobile Communications Best Practice Guidance and Mitigating Cyber Threats with Limited Resources: Guidance for Civil Society for steps to protect mobile communications and messaging apps.