Au.Finance.Yahoo Federal MP's WhatsApp Accounts Hacked in Suspected Russian Phishing Attack
Article Content
- •WhatsApp accounts of a federal MP and three staffers hacked via phishing.
- •Attack believed to be orchestrated by Russian state actors targeting government officials.
- •Temporary block on WhatsApp access implemented to mitigate further risks.
In March 2026, the WhatsApp accounts of a federal MP and three staffers were compromised in a phishing attack believed to be orchestrated by a foreign state actor, likely Russia. The attack involved hackers requesting legitimate WhatsApp verification codes from victims, allowing them to take over the accounts. Following the breach, the Department of Parliamentary Services (DPS) temporarily blocked WhatsApp access on parliamentary devices to prevent further compromises. The attack was reported during a Senate estimates hearing on May 25, 2026, highlighting the ongoing threat to government officials from state-sponsored cyber activities. The DPS noted that this incident is part of a broader trend of phishing campaigns targeting government officials globally. The block on WhatsApp was lifted after a week, but concerns remain about the security of personal accounts used by parliamentarians. The FBI and other international agencies have issued warnings regarding similar attacks targeting politicians.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (12)
Following this threat?
Track Department Of Parliamentary Services in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to… 
CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added five vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, including critical flaws in ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND. These vulnerabilities are being by Chinese actors for cyber espionage, targeting…