WhatsApp, Signal scam leads to Microsoft account hacks [April 2025]

Be careful with your Microsoft 365 account. Hackers are reportedly targeting Microsoft accounts through the popular WhatsApp and Signal messaging platforms.

Tech and cybersecurity website Bleeping Computer reported that “Russian threat actors” are “impersonating officials from European countries and [contacting] targets” in order to gain access to potential victims’ 365 accounts. The hackers have apparently targeted employees at organizations tied to human rights and Ukraine.

“The purpose is to convince potential victims to provide Microsoft authorization codes that give access to accounts, or to click on malicious links that collect logins and one-time access codes,” wrote Bleeping Computer, which reported cybersecurity company Volexity has been tracking these attempted hacks since March.