The Shin Bet and National Cyber Directorate are warning of an increase in attempts by Iranian intelligence actors to conduct phishing attacks against Israeli journalists. Their goal is to obtain information about the background of recent political and security developments. The statement says that hackers contact journalists, mainly through WhatsApp or Telegram, and send them cooperation offers, interview invitations or requests for a conversation. The aim is to build trust and cause journalists to click on a link to a meeting that leads to a page requesting login credentials for Google accounts or that leads to opening malicious links and files. Sometimes, the approach to reporters is made by impersonating other well-known reporters.

