Russian Smishing Campaign Stole Messaging Credentials | Drok | Drokio Blog

Russian Intelligence Targeted Ukrainian and US Officials in SMS Credential-Theft Campaign, SSU and FBI Reveal

A joint operation between Ukraine’s Security Service and the FBI has exposed a years-long Russian intelligence campaign that used fake SMS messages to steal messaging-app credentials from government officials, military personnel, and activists across three continents—turning a simple text into a national-security breach.

Drokio·June 29, 2026·4 min read

Russian Intelligence Targeted Ukrainian and US Officials in SMS Credential-Theft Campaign, SSU and FBI Reveal

Based on reporting by The Hacker News →

Introduction

The problem

According to a report by The Hacker News, the Security Service of Ukraine (SSU) announced that it, in coordination with the U.S. Federal Bureau of Investigation (FBI), uncovered a long-running cyber operation orchestrated by Russian intelligence services. The campaign systematically targeted the messaging accounts of Ukrainian, European, and American government officials, military personnel, politicians, and activists. The attackers used fraudulent “support” text messages designed to trick recipients into surrendering their login credentials for popular messaging applications, effectively stealing access to sensitive communications. The SSU stated the operation was aimed at stealing sensitive information.

Consequences

The direct consequence of this campaign is the potential compromise of high-value communications from officials and personnel responsible for national security, military operations, and diplomatic coordination. If messaging accounts are stolen, adversaries gain access not only to current conversations but also to contact lists, historical message logs, and any shared files or media. This can enable further targeting of contacts via social engineering, intelligence gathering on decision-making, and the potential for blackmail or disinformation based on intercepted material. For Ukraine, which relies heavily on secure communications for its defense and government continuity, this represents a direct threat to operational security. For the U.S. and European allies involved, it means exposure of diplomatic and coordination channels.

Russian Intelligence Targeted Ukrainian and US Officials in SMS Credential-Theft Campaign, SSU and FBI Reveal

Introduction

The problem

Consequences

Causes

Technical analysis

How to defend

How Drokio helps

Llave