Unc5792 — Threat Actor Profile, Campaigns & Targets

Related Threat Clusters

• US Offers $10M Reward for Information on Russian Hackers Targeting Messaging Apps

  The US Department of State has announced a reward of up to $10 million for information on two Russian-linked hacking groups, UNC5792 and UNC4221, accused of phishing attacks on Signal and WhatsApp users. These groups…

  8 articles · Updated June 29, 2026
• FBI Warns of Russian Hackers Targeting Signal Backup Recovery Keys

  The FBI and CISA have issued a warning regarding a phishing campaign by Russian intelligence services targeting Signal users to steal Backup Recovery Keys. This escalation allows attackers to access victims' historical…

  15 articles · Updated June 26, 2026
• Russian Intelligence Exploits Signal Backup Flaw, Cryptographic Fix Proposed

  A critical vulnerability in Signal's backup recovery key system has been exploited by Russian intelligence agencies, specifically the FSB and GRU, allowing unauthorized access to users' message archives. The FBI and…

  2 articles · Updated July 27, 2026
• Phishing Attacks via Signal Targeting German Officials and Journalists

  Germany's BfV and BSI have issued a warning regarding phishing attempts via the Signal messaging app. The attacks are believed to be conducted by state or state-controlled actors, targeting high-ranking officials in…

  12 articles · Updated February 6, 2026

Recent Intelligence Reports

• Signal Backup Recovery Key Flaw Exploited by Russian Spies Gets Formal Cryptographic Fix Today — Techtimes · July 27, 2026
• US offers $10m reward for information on Russian hackers — Computing · June 30, 2026
• U.S. Targets Russian Cyber Spies With $10M Bounty Over Messaging App Attacks — Securityaffairs.Co · June 29, 2026
• US offers $10 million reward for Russian hackers targeting Signal and WhatsApp — Feeds.4Sysops · June 29, 2026
• FBI says Russian spies now trick Signal users into handing over their backup recovery key — Thenextweb · June 27, 2026
• FBI: Russian hackers now target Signal backup recovery keys — Bleepingcomputer · June 26, 2026
• FBI: Russian hackers now target Signal backup recovery keys — Bleepingcomputer · June 26, 2026
• Signal Under Siege: How Russian-Linked Hackers Are Exploiting the Encrypted ... — Webpronews · February 7, 2026

Related Entities