German Government Attributes Signal Messenger Phishing Attacks to Russian Actors Impacting Political and Media Figures
Phishing attacks targeting Signal users including German politicians and journalists have been linked by Berlin to Russia, raising concerns over cybersecurity in critical communication channels.

Germany is currently investigating a series of sophisticated phishing attacks conducted via the encrypted messaging app Signal, targeting high-profile individuals including politicians, military personnel, and journalists. German federal authorities have attributed these cyberattacks to Russian actors, highlighting growing concerns over espionage and digital vulnerabilities in sensitive communication platforms.
Impact on German Political and Media Figures
According to sources within the German government, the attacks, which reportedly exploited phishing techniques, aimed to gain unauthorized access to Signal accounts belonging to users across political, business, and media spheres. The Federal Prosecutor's Office of Germany has already confirmed several compromised accounts and initiated investigations, while security agencies have informed the victims involved.
"The recent phishing attempt from Russia against German politicians and journalists is a worrying signal for all of us," stated Marc Henrichmann, chairman of the parliamentary committee overseeing intelligence services.
The breach affected deputies from nearly all factions of the Bundestag, NATO and Bundeswehr military personnel, as well as prominent journalists. The attackers impersonated Signal technical support staff to deceive victims, subsequently exploiting compromised accounts to spread further attacks through group and private chats by masquerading as legitimate account holders.
Among the confirmed victims are Germany's Federal Minister of Education Karin Prien, Federal Minister for Building Verena Hubertz, and Bundestag President Julia Klöckner, the second-highest-ranking official in the German government and a key figure in the Christian Democratic Union (CDU).
Broader Cybersecurity and Innovation Ecosystem Implications
These cyber incidents underline the persistent cybersecurity threats faced by political and media leaders, as well as implications for technology startups providing encrypted communication solutions. Signal, known for its strong encryption and privacy features, serves as a critical tool for secure communications within government and civil society.
The attacks could prompt increased scrutiny and investments in cybersecurity technologies by venture capital firms interested in supporting startups that bolster digital security, identity verification, and anti-phishing mechanisms. Additionally, the incident emphasizes the need for innovation within the secure messaging ecosystem to counter advanced persistent threats.
While Chancellor Friedrich Merz was reportedly a potential target, German intelligence services have found no anomalies on his Signal account following a thorough examination. The government has confirmed that data leakage from compromised devices has been contained, though authorities caution that the full scope of affected users may be larger than currently known.
At this critical juncture, the German government's attribution of responsibility to Russian actors highlights ongoing geopolitical cyber tensions and the importance of resilient, secure communication infrastructures for democratic institutions and the media.



