Iranian phishing scam (UWI) (UWI)
phishing scam

The Shin Bet and National Cyber Directorate said they identified the latest attempts and are working to prevent and thwart the attacks.

By United with Israel Staff

Israeli security agencies have identified a renewed Iranian intelligence campaign targeting journalists and media professionals with personalized phishing attempts designed to gain access to sensitive information, the Shin Bet and Israel National Cyber Directorate announced Sunday.

According to the agencies, Iranian operatives have been approaching their targets primarily through WhatsApp and Telegram, often impersonating familiar contacts and, in some cases, other well-known journalists.

Unlike generic phishing attempts, the messages are tailored to the individual recipient and their work. Operatives may propose an interview, request a conversation or offer professional cooperation in an effort to establish credibility before sending a malicious link or file.

The links are often presented as invitations to online meetings but instead direct victims to fraudulent login pages designed to steal Google account credentials. Other links or files may contain malicious software capable of compromising the victim’s mobile device.

Israeli authorities believe the campaign is intended to obtain information amid recent political and security developments, potentially giving Iranian intelligence access to journalists’ communications, professional materials, contacts and other sensitive information.

The Shin Bet and National Cyber Directorate said they identified the latest attempts and are working to prevent and thwart the attacks.

The Iranian efforts are not limited to the media. According to the agencies, individuals working in political, government, public and security-related fields have also been targeted.

Officials urged journalists and other potential targets to independently verify the identity of anyone making an unexpected approach, particularly when a message contains a link, attachment or request for personal information.

They also warned users never to enter passwords or verification codes through links received in messages and recommended enabling two-factor authentication on major accounts, particularly Google and WhatsApp, as well as setting up a recovery email.

Users should periodically review devices and active sessions connected to their accounts and remove any they do not recognize, the agencies said.

The warning comes as Israeli authorities continue efforts to counter Iranian intelligence operations targeting Israelis, with Tehran increasingly using online platforms and deceptive communications to approach potential targets and obtain information.

Do You Love Israel? Make a Donation - Show Your Support!

Donate to vital charities that help protect Israeli citizens and inspire millions around the world to support Israel too!

Now more than ever, Israel needs your help to fight and win the war -- including on the battlefield of public opinion.

Antisemitism, anti-Israel bias and boycotts are out of control. Israel's enemies are inciting terror and violence against innocent Israelis and Jews around the world. Help us fight back!

STAND WTH ISRAEL - MAKE A DONATION TODAY!