Will a successful Russian intelligence phishing campaign via messaging apps result in documented credential compromise by end of 2026?

CISA and FBI issued an updated PSA (June 2026) warning of Russian Intelligence Services (RIS) cyber threat actors targeting commercial messaging applications in ongoing phishing campaigns. This update builds on the March 2026 PSA and indicates escalation. Source: CISA Alerts.

Resolution Criteria

Public disclosure by CISA, FBI, US-CERT, or major security vendor of a confirmed RIS-attributed phishing campaign (via messaging app) resulting in credential theft, session hijacking, or account compromise at a US organization. Attribution must cite signals such as infrastructure, malware, TTP overlap with known RIS groups, or official statement.