Kremlin targeted app used for Yemen war plans chat
Russia-aligned cyber actors have previously targeted the encrypted messaging app that was used by top officials in the Trump administration to discuss attacks against Houthi rebels in Yemen earlier this month.
Google Threat Intelligence Group said it had observed an increased effort by cyber actors associated with the Kremlin to compromise Signal accounts of interest to Russian intelligence in a February report.
“While this emerging operational interest has likely been sparked by wartime demands to gain access to sensitive government and military communications in the context of Russia's re-invasion of Ukraine, we anticipate the tactics and methods used to target Signal will grow in prevalence in the near-term and proliferate to additional threat actors and regions outside the Ukrainian theater of war,” Google noted.
The Russia-aligned cyber actors have used Signal’s linked devices feature to compromise accounts, according to the Google report. The feature allows a Signal account to be on multiple devices at once.
The cyber actors have used malicious QR codes to link to victims’ accounts, allowing them to receive all future messages and eavesdrop on victims’ conversations. They posed the QR codes as legitimate Signal resources, such as group invites or security alerts, or embedded them in phishing pages.
Google warned there’s a “high risk” that a compromised Signal account can go unnoticed for an extended period of time.
The encrypted messaging platform has received additional scrutiny since Jeffrey Goldberg, The Atlantic's editor in chief, revealed Monday that he had been mistakenly added to a Signal chat with top Trump officials on the app where they discussed war plans.
The chat featured Defense Secretary Pete Hegseth, national security adviser Mike Waltz, Vice President Vance, Secretary of State Marco Rubio, Director of National Intelligence Tulsi Gabbard and CIA Director John Ratcliffe, among others.
In the chain, where Goldberg’s presence appears to have gone unnoticed for several days, Hegseth reportedly sent details about weapons used, targets, and timing just hours before the strikes in Yemen took place.
The Atlantic editor wrote that he initially doubted the chat was real “because I could not believe that the national security leadership of the United States would communicate on Signal about imminent war plans.”
Brian Hughes, the spokesperson for the National Security Council, said Monday that the text chain appeared to be “authentic” and that the administration is “reviewing how an inadvertent number was added to the chain.”
However, the White House sought to downplay the significance of the breach Tuesday, with press secretary Karoline Leavitt arguing that no “war plans” were discussed in the thread and no classified materials were shared.
-
What is Signal, app used in Yemen war plans chat?
High-level Trump officials used the digital messaging app Signal to communicate sensitive details about an impending military strike against Houthi terrorists in Yemen earlier this month, sparking ...The Hill - 9h -
White House pushes back at war plans group chat story
The White House on Tuesday sought to downplay the significance of a journalist being added to a group chat of administration officials discussing plans for attacks against Houthi rebels in Yemen. ...The Hill - 12h -
Messages with Yemen war plans shared with reporter appears 'authentic': Official
Members of the Trump administration coordinated highly sensitive Yemen attack plans on an unsecure group chat, a White House official confirmed.ABC News - 13h -
US airstrikes targeting Yemen's Houthi rebels kill at least 1 person, wounds others, group says
U.S. airstrikes targeting Yemen’s Houthi rebels have pounded sites across the countryABC News - 1d -
Yemen war plans group chat: A timeline of the mishap
Officials inadvertently added a reporter to an unsecured group chat discussing plans for a U.S. attack on Houthis in Yemen. Here's a look at a timeline of the events.ABC News - 3h -
US launches new airstrikes on Houthi rebels in Yemen
U.S. fighters carried out arial attacks on Houthi rebels in Yemen, killing at least 30 people in an effort to stop Houthi attacks on ships in the region. Meanwhile, President Trump invoked the ...NBC News - Mar. 16 -
What to know about Signal, app used by Trump officials for war plans
Defense Secretary Pete Hegseth and other Trump officials allegedly used Signal for a group chat to discuss a highly sensitive operation.CBS News - 1h -
US airstrikes on Yemen’s Houthis kill at least 31
Up to 100 injured after Trump orders strikes in response to shipping attacks. The US has launched airstrikes against Yemen’s Iran-aligned Houthis, killing at least 31 people and injured up to 100 ...The Guardian - Mar. 16 -
Schumer blasts Trump officials for war plans Signal chat
Senate Minority Leader Chuck Schumer (D-N.Y.) panned the Trump administration over Monday’s “stunning” report that top officials used an unauthorized messaging platform to discuss planned attacks ...The Hill - 1d
More from The Hill
-
Less than 1 in 5 favor US annexing Canada, Greenland: Survey
Less than one in five Americans favor the U.S. annexing Canada and semiautonomous island Greenland, according to a new survey released Tuesday. The Yahoo News/YouGov poll found that 17 percent of ...The Hill - 28m -
Waltz questions how the Atlantic editor 'somehow' got 'sucked into' the Signal chat
National security adviser Mike Waltz questioned how The Atlantic's editor-in-chief, Jeffrey Goldberg, was added to a Signal group chat with national security officials who were communicating about ...The Hill - 29m -
House Democrat: Hegseth shared classified info to make up for 'personal inadequacies'
Rep. John Garamendi (D-Calif.) suggested Secretary of Defense Pete Hegseth shared top secret information in a Signal group chat with national security officials to alleviate “personal ...The Hill - 1h -
Trump officials face records lawsuit over Signal chat
A government watchdog group is suing national security leaders for their use of Signal to discuss military actions, saying the move violated the Federal Records Act (FRA). The suit from American ...The Hill - 1h -
Trump signs order targeting mail-in ballots, proof of citizenship in federal elections
President Trump on Tuesday signed an executive order that would dramatically overhaul how federal elections are run, a move that follows years of exaggerated claims from Trump about mail ballots ...The Hill - 1h
More in Politics
-
Less than 1 in 5 favor US annexing Canada, Greenland: Survey
Less than one in five Americans favor the U.S. annexing Canada and semiautonomous island Greenland, according to a new survey released Tuesday. The Yahoo News/YouGov poll found that 17 percent of ...The Hill - 28m -
Waltz questions how the Atlantic editor 'somehow' got 'sucked into' the Signal chat
National security adviser Mike Waltz questioned how The Atlantic's editor-in-chief, Jeffrey Goldberg, was added to a Signal group chat with national security officials who were communicating about ...The Hill - 29m -
House Democrat: Hegseth shared classified info to make up for 'personal inadequacies'
Rep. John Garamendi (D-Calif.) suggested Secretary of Defense Pete Hegseth shared top secret information in a Signal group chat with national security officials to alleviate “personal ...The Hill - 1h -
Trump officials face records lawsuit over Signal chat
A government watchdog group is suing national security leaders for their use of Signal to discuss military actions, saying the move violated the Federal Records Act (FRA). The suit from American ...The Hill - 1h -
Trump signs order targeting mail-in ballots, proof of citizenship in federal elections
President Trump on Tuesday signed an executive order that would dramatically overhaul how federal elections are run, a move that follows years of exaggerated claims from Trump about mail ballots ...The Hill - 1h