Whatsapp, Signal Scam Leads to Microsoft Account Hacks [April 2025]

Be careful with your Microsoft 365 Account. Hackers are reportedly targeting Microsoft Accounts through the popular Whatsapp and Signal Messaging Platforms.

Tech and cybersecurity website Bleeping Computer Reported That “Russian Threat Actor” Are “Impersonating Officials from European Countries and [contacting] Targets “in Order to Gain Access to Potential Victims’ 365 Accounts. The Hackers have apparently targeted Empolyees at Organizations Tied to Human Rights and Ukraine.

“The purpose is to convince potential victims to provide microsoft authorization codes that give access to accounts, or to click on Malicious Links that Collectable Logins and Oone-TIME ACESSS OHISS OHIS Wrote Bleeping Computer, which reported cybersecurity company Volexity has been tracking These attempted hacks since march.

This tweet is currently unavailable. It might be loading or has been removed.

How to spot the potential hack

Volexity, the cybersecurity company that spotted this potential hack, has A blog post about the issue. The blog post notes that the bad actors Sent Messages Over Signal, WhatsApp, and, In One Case, A Compromised Ukrainian Government Email Address. The Messages Directed Potential Victims to Click a Link Purpporting to be a meeting on Ukraine-Related issues.

Volexity also posted screenshots of the signal and whatsapp messages. So, texts or emails like these should raise a red flag.

As always, be careful what you click out there. Especially if you work at a human rights organization.

Have a story to share a scam or security breach that impacted you? Tell us about it. Email [email protected] With the subject line “safety net” or use This form, Someone from mashable will get in touch.