EU Officials Targeted by State-Sponsored Cyberattacks on Messaging Apps

For the first time, the EU has officially acknowledged that state actors are attempting to hack into the messaging accounts of high-ranking officials using spear-phishing techniques. The attacks primarily target Signal and WhatsApp accounts, employing social engineering tactics to trick users into revealing access codes. Over the past year, more than 190 threat actors have been identified, with eight significant incidents reported in the first half of 2026. The German security agencies have linked these phishing campaigns to state-controlled actors, specifically aimed at politicians, military personnel, and journalists. The EU's Interinstitutional Cybersecurity Board has highlighted the need for improved cybersecurity measures across its institutions, as current practices vary widely. A cloud data breach in March 2026 also exacerbated the situation, affecting parts of the Europa.eu website. The ongoing threat underscores the vulnerabilities in the EU's cybersecurity framework and the urgency for a unified response.

Key Points: • State actors are targeting EU officials' messaging apps, particularly Signal and WhatsApp. • The attacks utilize spear-phishing and social engineering tactics to compromise accounts. • Over 190 threat actors have been identified, with eight significant incidents reported in 2026.