---
title: 'Czech NÚKIB warns Russian actors are phishing Signal users through linked devices'
url: 'https://securteksecurity.com/news/czech-nukib-warns-signal-linked-device-phishing'
markdown: 'https://securteksecurity.com/news/czech-nukib-warns-signal-linked-device-phishing.md'
date: '2026-10-13'
description: "The Czech National Cyber and Information Security Agency published an analysis on October 13 of Russian-linked campaigns (including APT44/Sandworm and Turla) that trick Signal users into linking an attacker device, usually through fake support messages and malicious QR codes. Signal's encryption is…"
taxonomy:
  category:
    - Cybersecurity
---

# [Czech NÚKIB warns Russian actors are phishing Signal users through linked devices](https://securteksecurity.com/news/czech-nukib-warns-signal-linked-device-phishing)

   13th Oct 2026  

The Czech National Cyber and Information Security Agency published an analysis on October 13 of Russian-linked campaigns (including APT44/Sandworm and Turla) that trick Signal users into linking an attacker device, usually through fake support messages and malicious QR codes. Signal's encryption is not broken; the attack exploits user error. Similar activity is confirmed in Ukraine, Germany, France and the Netherlands, and the FBI estimates thousands of accounts affected worldwide.

Sources: [NÚKIB](https://nukib.gov.cz/en/infoservis-en/news/2465-russian-actors-are-targeting-signal-users-nukib-releases-an-analysis-and-recommendations-on-how-to-secure-the-app/); [TechTimes](https://www.techtimes.com/articles/328997/20261014/russia-compromised-signal-accounts-five-nato-nations-czech-republic-confirms-breach.htm)

---

## Navigation

- Parent: [News](https://securteksecurity.com/news.md)
- Previous: [Cysic halts cross-chain bridge after unauthorized mint of 10 million CYS](https://securteksecurity.com/news/cysic-bridge-unauthorized-mint-10-million-cys.md)
- Next: [Attackers hijack Danfoss refrigeration controllers, overheating freezers at hundreds of French supermarkets](https://securteksecurity.com/news/danfoss-refrigeration-controllers-hijacked-french-supermarkets.md)