A spyware investigator exposed Russian government hackers trying to hijack Signal accounts

A spyware researcher received a fake Signal security alert and traced it to a wider phishing campaign.

The operation used social engineering and device-linking tricks to hijack Signal accounts.

More than 13,500 people were targeted, including journalists and political figures.

Evidence points to Russian government hackers behind the campaign, prompting warnings from CISA and other agencies.