German federal prosecutors opened an investigation into phishing attacks targeting politicians.
The probe launched mid-April focused on messaging app exploits. High-profile victims included parliamentary president Julia Kloeckner. Attackers compromised her Signal account successfully.
Chancellor Friedrich Merz escaped breach after phone examination. Both leaders belonged to ruling CDU party. Domestic intelligence BfV warned lawmakers of active campaign earlier.
Prosecutors classified incidents as potential espionage. Attackers exploited legitimate security features through social engineering. No malware detected in examinations.
BfV and cybersecurity office BSI confirmed operation persisted. State-sponsored actors suspected behind sophisticated tactics. NATO officials reported similar incidents.
Government communications routed through secure channels. Cabinet members unaffected by breaches. Spokesman emphasized protection protocols without specifics.
Signal phishing evaded detection through app-native methods. Attackers gained unnoticed access to group conversations. Parliamentary spheres exposed significantly.
Kloeckner's compromise highlighted vulnerability. BfV briefing to Merz underscored threat level. Campaign gained momentum targeting diplomats and journalists too.
Prosecutors withheld details on suspects. Intelligence pointed toward foreign adversaries. Previous Russian-linked Ghostwriter group employed similar phishing.
2021 investigations traced attacks to GRU military intelligence. Current campaign mirrored tactics with heightened sophistication. Bundestag members faced repeated attempts.
Government protested foreign interference formally. Secure alternatives protected executive functions. Parliamentary response prioritized awareness training.
Cybersecurity firms analyzed attack vectors closely. Social engineering bypassed two-factor authentication effectively. Messaging apps emerged as preferred espionage channels.
The investigation represented escalation in digital threat response. Prosecutors coordinated with intelligence for comprehensive attribution. Lawmakers received updated security briefings.
Signal maintained end-to-end encryption integrity. Attackers compromised user credentials externally. Platform cooperated with authorities on forensic analysis.
Broader implications affected NATO communications. Allied officials monitored campaign expansion. German probe set precedent for cross-border cooperation.
Federal prosecutors committed full resources. Espionage classification enabled expanded investigative powers. Resolution timeline remained undetermined.