Cyber War Escalates: Russia Accused as 300 German Political Accounts Compromised
Germany is investigating a wave of phishing attacks targeting politicians through the Signal messaging app, with officials suspecting Russian involvement. Hundreds of Bundestag members may have been affected as concerns grow over communication security.
German and international security agencies have issued fresh warnings about phishing campaigns aimed at lawmakers and senior officials. These attacks, believed to be carried out by a state-controlled cyber actor, involve fake messages posing as Signal support to trick users into sharing sensitive access details.
According to government sources, the phishing attempts likely originated from Russia. Victims reportedly receive instructions to enter a PIN, click malicious links, or scan QR codes. Once access is gained, attackers can read private messages, view shared files, and even impersonate the compromised user.
Although authorities have not confirmed exact numbers, local reports suggest at least 300 political accounts may have been breached. The scale of the attack has raised alarm, especially as many officials had switched from WhatsApp to Signal over privacy concerns linked to Meta, the parent company of Facebook and Instagram.
Konstantin von Notz warned that the true extent of the breach remains unclear and that unreported cases are expected to increase. He emphasized that it is currently uncertain whether the integrity of parliamentary communications can still be guaranteed.
The attacks have not been limited to politicians. Civil servants, diplomats, military personnel, and journalists were also targeted, pointing to a broader campaign aimed at sensitive sectors across Germany.
Within the Bundestag, debates are ongoing about how to respond. Vice-President Andrea Lindholz has rejected calls to ban Signal, stating that lawmakers should decide which communication tools to use. However, discussions are underway about restricting the desktop version of the app on official devices.
Germany, a key military supporter of Ukraine, has faced increasing cyber threats, espionage, and sabotage attempts since Russia’s full-scale invasion in 2022. Despite repeated accusations, Moscow continues to deny any involvement in such activities.