← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Signals of Trouble: Multiple Russia-Aligned Threat Actors Actively Targeting Signal Messenger | Google Cloud Blog
WHITE Signal TheCrowFather 2026-04-10 Modified: 2026-04-10
30
IOCs
MEDIUM VOLUME
Google's Threat Intelligence Group (GTIG) has issued a public warning about Russian-aligned attempts to compromise Signal Messenger accounts used by individuals of interest to Russia's intelligence services in the Ukraine theater of war.
russiasignalgoogle threatgtigukrainewhatsapptelegramandroid
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (4 / 30 total)
All IPv4 FileHash-MD5 URL domain hostname
TYPEINDICATORDESCRIPTIONCREATED
FileHash-MD5 a97a28276e4f88134561d938f60db495 — 2026-04-10
FileHash-MD5 b27ff24870d93d651ee1d8e06276fa98 — 2026-04-10
FileHash-MD5 b379d8f583112cad3cf60f95ab3a67fd — 2026-04-10
FileHash-MD5 e078778b62796bab2d7ab2b04d6b01bf — 2026-04-10
References (1)
↗ https://cloud.google.com/blog/topics/threat-intelligence/russia-targeting-signal-messenger