Iranian Intelligence Targets Israeli Journalists with Phishing Attacks to Steal Sensitive Information

Israeli security agencies have identified a new wave of targeted phishing attempts by Iranian intelligence operatives aimed at Israeli journalists and media professionals. The attacks, detected early by the Shin Bet (Israel Security Agency) and the National Cyber Directorate, involve deceptive messages sent primarily via WhatsApp and Telegram. These messages impersonate familiar contacts and offer collaboration, interviews, or professional conversations to build trust and lure journalists into clicking malicious links presented as virtual meeting invitations.

These links lead to fake login pages requesting Google account credentials or trigger the download of malware designed to take control of the victim's mobile device. In some cases, attackers impersonate other known journalists to increase credibility. The intelligence goal behind these operations is to obtain sensitive information related to recent political and security developments in Israel, as well as access journalistic sources, communications, and materials that could be exploited for terrorism, espionage, intelligence gathering, and influence activities.

Similar attempts have also targeted individuals in other sectors, prompting authorities to call for heightened vigilance among all professionals involved in political, public, governmental, and security fields. The National Cyber Directorate issued protective guidelines, including verifying the identity of unexpected contacts through alternative communication channels, never entering passwords or verification codes via suspicious links, enabling two-factor authentication on key accounts, regularly reviewing account access, and promptly reporting suspicious activity to organizational security teams and the Cyber Directorate's hotline.

Security officials stress that these sophisticated and ongoing Iranian intelligence operations require constant awareness and caution from users themselves. Recent warnings have also highlighted impersonation attempts involving Microsoft services and other companies. The Shin Bet and National Cyber Directorate continue their efforts to detect and thwart these cyberattacks, emphasizing public cooperation as essential to safeguarding Israel's digital environment.