Cybersecurity Chief Charged With Hacking Companies, Spying on Women

The State Prosecutor's Office in Israel has indicted 43-year-old Michael Bar of Ashkelon for a series of cyberattacks against Israeli companies and individuals, which allegedly began in 2019. Prosecutors claim Bar, who previously served as an information security director for a construction and housing firm, used artificial intelligence to develop and deploy malicious software. This software reportedly granted him remote access to the computers of 26 companies and private individuals, allowing him to steal sensitive business and personal information, including passwords and financial data. He is also accused of activating device cameras without the owners' knowledge, observing users in real-time, and recording their activities. The indictment states that the malware continued to operate even after computers were turned off. Specifically, Bar allegedly used the compromised cameras to secretly film women working at these companies in their homes or hotel rooms, with some recordings including their minor daughters. The sophisticated nature of the attacks was only discovered in April 2026 when one of the targeted companies launched an internal investigation into suspected cyber intrusions. This led to the realization that it was a widespread attack, not an isolated incident. When contacted by Israel's National Cyber Directorate, as he was an information security director at one of the affected companies, Bar allegedly denied involvement but continued his activities. He is further accused of developing more advanced malware and deploying it against additional companies. The prosecution has charged Bar with multiple offenses, including illegal computer intrusion, unauthorized use of computer programs, virus dissemination, invasion of privacy, and theft. They are seeking his continued detention pending trial, citing his advanced technical skills and knowledge in cybersecurity as enabling him to adapt his malware for diverse attacks. The investigation was conducted by the Israeli Police's Lahav 433 cybercrime unit.