Iran Targets Israeli Journalists with Sophisticated Phishing Cyberattacks

Iranian intelligence has identified Israeli journalists as a key vulnerability, targeting them through phishing links designed to access sensitive communications and contacts. According to Israeli cyber experts, these phishing attempts are not focused on the journalists' published content but rather on the confidential information in their phones, including conversations with political, security, and military leaders.

The cyber officials explained that phishing remains a persistent threat linked to human psychology, but journalists tend to be more cautious, with only a few responding to such campaigns. The real danger lies in gaining access to ongoing trusted conversations rather than just initial contact. Attackers use links that mimic Google login pages, exploiting the fact that users often do not need to re-enter passwords due to device encryption, making it easier to compromise accounts without triggering suspicion.

The current campaign does not require victims to input passwords, only to click on links, which can still lead to device takeover, including bypassing two-factor authentication on platforms like WhatsApp. Experts warned of more advanced "zero-day" vulnerabilities that allow attackers to seize control simply by clicking a link, without any further action from the user.

Israeli cyber defense officials highlighted the high costs and frequent critical security patches needed to address these zero-day exploits, which even operating system developers may be unaware of. They also stressed that the threat extends beyond intercepted messages to potential unauthorized access to device cameras and microphones, enabling covert surveillance and blackmail that may not be immediately apparent.

The experts urged wider adoption of two-factor authentication, which significantly enhances security but remains underused in Israel as of 2026. The warnings come amid ongoing cyber tensions between Iran and Israel, emphasizing the sophisticated nature of cyber espionage targeting Israeli media professionals.