Germany Blames Russia for Signal Phishing Campaign Targeting MPs and Officials

Analysis
The targeting of Bundestag President Klöckner, a constitutional officer rather than a backbencher, calibrates the campaign's ambition above hacktivist-proxy level, pointing toward GRU Unit 26165 or SVR authorship per corroborated wire reporting from France 24, AFP, and specialist coverage in Security Affairs. Germany's public attribution paired with a federal prosecution opening places the incident on the standard EU attribution pathway, making formal identification of a named Russian unit likely within 60 days. The 2024 Czech and Bundestag compromises followed a comparable attribution-to-sanctions arc, lending that timeline additional weight. The publicly surfaced targeting may represent only the detected fraction of a broader credential-harvesting program aimed at intelligence collection rather than disruption, a distinction that matters if the full scope remains active and unannounced.