Shin Bet Warns Israeli Journalists of Iranian Phishing Attacks Amid Security Tensions

The Shin Bet security service and Israel's National Cyber Directorate have issued a warning about a recent surge in targeted phishing attempts by Iranian intelligence against Israeli journalists and media personnel. These attacks aim to extract sensitive information related to ongoing political and security developments. The cyber units have detected and are actively working to prevent these attempts.

The phishing campaigns primarily use WhatsApp and Telegram, impersonating familiar contacts and tailoring messages to the recipient's interests, such as offers for collaboration or interview invitations. These messages include links to fake login pages requesting Google account credentials or malicious files that can compromise mobile devices. Sometimes attackers impersonate other known journalists to gain trust.

The intelligence goal is to access sensitive security and political information, journalistic sources, work materials, and communications, potentially aiding Iranian intelligence in terrorism, espionage, intelligence gathering, and influence operations. Similar efforts target other sectors, prompting a call for heightened vigilance among those involved in political, public, governmental, and security activities.

The National Cyber Directorate recommends verifying the identity of unexpected contacts through alternative communication channels, never entering passwords or verification codes via suspicious links, enabling two-factor authentication on key accounts (especially Google and WhatsApp), regularly reviewing account access, and immediately reporting suspicious activity to organizational security teams and the Cyber Directorate’s 119 hotline.