Israel Security Chief Charged with Hacking 26 Companies, Spying on Employees

Israeli authorities have indicted Michael (Miki) Bar, a former information security manager for the Hamat Group, for allegedly hacking into 26 companies, two kibbutzim, and private individuals' computers. Bar is accused of systematically developing and deploying malicious software, or malware, since 2019 to steal sensitive business information, passwords, and personal data. The indictment details how he allegedly used artificial intelligence tools, including Claude, to create more sophisticated malware after his initial cyberattacks were discovered.

Bar's alleged activities came to light when national cyber defense officials contacted him in April, suspecting the Hamat Group was a victim of a widespread attack. Unbeknownst to them, Bar was reportedly the perpetrator. He is accused of concealing his involvement and continuing his illicit activities, even developing new malware to further infiltrate systems. The indictment includes 11 separate charges, encompassing offenses like unauthorized computer access, introducing viruses, privacy violations, and theft, with estimated damages to companies totaling approximately 1.5 million shekels.

The charges describe Bar's sophisticated control system, which utilized Telegram bots to remotely operate malware. This malware could allegedly capture screenshots, record audio and video via computer microphones and cameras, extract saved passwords and credit card details, and even remotely shut down computers. He is also accused of developing additional advanced malware this year to collect login credentials, record keystrokes in real-time, and spy on users through live screen viewing and audio recording.

Beyond corporate espionage, the indictment alleges Bar engaged in severe privacy invasions, using computer cameras and microphones in victims' homes, including bedrooms, to record them without their knowledge. Specific instances cited include filming a product manager sleeping and a business development executive in a hotel room, as well as accessing sensitive personal information like health fund login details and private communications. The prosecution is seeking to detain Bar until the conclusion of legal proceedings, citing his dangerousness and the risk of evidence tampering.