New FBI warning reveals phishing attacks hitting private chats

This post was originally published on this site.

Cyber expert shares tips to avoid AI phishing scams

Kurt ‘The CyberGuy’ Knutsson shares practical ways to avoid falling victim to AI-generated phishing scams and discusses a report that North Korean agents are posing as I.T.workers to funnel money into the country’s nuclear program.

You probably think your messages are safe.After all, apps like WhatsApp, Signal and Telegram promotestrong encryption.

But a new warning from the Cybersecurity and Infrastructure Security Agency and theFederal Bureau of Investigationshows that attackers do not need to break encryption at all.

Instead, they are going after you.

Sign up for my FREE CyberGuy Report

Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com trusted by millions who watch CyberGuy on TV daily.
Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

FBI WARNS ABOUT FOREIGN APPS AND YOUR DATA

A person uses an iPhone next to a laptop.

A new federal advisory says phishing campaigns tied to Russian intelligence are going after messaging app users instead of trying to break encryption.(MStudioImages/Getty Images)

What the FBI and CISA just revealed

According to the joint advisory, cyber actors tied to Russian intelligence are running large-scale phishing campaignstargeting messaging apps.

These attacks are not random.They have focused on high-value targets like government officials, military personnel and journalists.However, the tactics can easily spread to everyday users.

Here is the key takeaway: Hackers are not cracking the apps themselves.They are tricking people into giving up access.

How these messaging app attacks actually work

This is where it gets interesting and a bit unsettling.Instead of breaking encryption, attackers use phishing to gain control of individual accounts.Once inside, they can:

Read private conversations
Access contact lists
Send messages as if they were you
Launch new scams targeting your contacts

It becomes a chain reaction.One compromised account can quickly lead to many more.In some cases,attackers impersonate trusted contacts.That makes the scam feel real and urgent.

Why encryption is not enough anymore

Encryption still matters.It protects messages as they travel between devices.But here is the problem.If someone logs into your account, they see everything just like you do.

That means even the most secure app cannot protect you if your login gets compromised.This is a shift in how cyberattacks work.The weakest link is no longer the technology.It is human behavior.

AI IS NOW POWERING CYBERATTACKS, MICROSOFT WARNS

A person holds a smartphone with messaging apps showing.

The FBI and CISA are warning that attackers are targeting users of encrypted messaging apps by tricking them into handing over account access.(BackyardProduction/Getty Images)

Who is at risk from messaging app phishing attacks

While the advisory highlights high-profile targets, the tactics are not limited to them.

If you use messaging apps for:

Personal conversations
Work communication
Sharing sensitive information

You are a potential target.Phishing works because it relies on simple mistakes.A quick tap on the wrong link is often all it takes.

What this means for you

This warning highlights a bigger trend.Cyberattacks are becoming more personal.Instead of attacking systems, hackers aretargeting people directly.That makes awareness your strongest defense.The more you understand how these scams work, the harder it becomes for attackers to succeed.

Ways to stay safe from messaging app phishing attacks

You do not need to be a cybersecurity expert to protect yourself.You just need to slow things down and follow a few smart habits.

1) Be skeptical of unexpected messages

If a message feels urgent or out of place, pause.Even if it looks like it came from someone you know.

2) Never click suspicious links

Avoid links sent through messages unless you can verify them independently. Strong antivirus software can help detect suspicious behavior after a compromise.Get my picks for the best 2026 antivirus protection winners for your Windows, Mac, Android &iOS devices at Cyberguy.com.

3) Turn on two-factor authentication

Two-factor authentication (2FA) adds a second layer of protection even if your password gets exposed.

TECH GIANTS UNITE TO FIGHT ONLINE SCAMS

A woman lounges, using a smart phone with a keyboard on the screen.

Officials say hackers can read messages, access contacts and impersonate users once they gain control of a messaging app account.(FreshSplash/Getty Images)

4) Watch for login alerts

Many apps notify you when a new device signs in.Do not ignore these warnings.

5) Verify requests in another way

If a contact asks for something unusual, call them or confirm through another channel.

6) Use a data removal service

Limit how much of yourpersonal informationis available online.Data removal services work to delete your data from broker sites, making it harder for scammers to target you with convincing phishing messages.Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

7) Keep your device and apps updated

Install updates regularly.Security patches fix vulnerabilities that attackers can exploit after gaining access.

Kurt’s key takeaways

Messaging apps feel private.They feel secure.That sense of comfort is exactly what attackers are counting on.The technology is still strong.The real question is whether your habits are keeping up.So the next time a message pops up that feels slightly off, trust that instinct and take a second look.

Have you ever received a suspicious message that made you stop and question if it was real?Let us know by writing to us at Cyberguy.com.

onelink.me/xLDS?pid=AppArticleLink&af_web_dp=https%3A%2F%2Fwww.