Iran Launches New Phishing Attacks Targeting Israeli Journalists

Israeli journalists and media professionals are facing a new wave of targeted phishing attacks originating from Iran, aimed at extracting sensitive information amid recent regional developments. These attacks primarily use WhatsApp and Telegram, where attackers impersonate known contacts or colleagues, sending personalized messages such as collaboration offers or interview invitations. The messages include links to fake login pages or malicious files designed to compromise mobile devices and steal Google account credentials.

In some cases, attackers even pose as other journalists to gain trust. The National Cyber Directorate of Israel has issued security recommendations, urging recipients to verify the identity of any unexpected contacts through alternative communication channels before clicking on links or sharing personal information. They emphasize not entering passwords or verification codes in response to suspicious messages and advise enabling two-factor authentication on key accounts, especially Google and WhatsApp.

Additional precautions include setting up email recovery options, regularly reviewing account access to remove unknown devices, and promptly reporting any suspicious activity to organizational security teams and the National Cyber Directorate's 119 hotline. This cyber threat comes amid heightened tensions involving Iran, underscoring the ongoing risks faced by Israeli media personnel.