Shuma Abu Aabed, a Nazareth mother of four, was arrested in March on suspicion of spying for Iran in exchange for hundreds of dollars. Among other allegations, prosecutors say she exploited her access to Transportation Ministry databases through her job at a company that provided services to the ministry. Her arrest was cleared for publication Wednesday, when an indictment was filed against her.
“As part of a joint operation by the Shin Bet and the Northern District’s central unit of Israel Police, an Israeli citizen was arrested on suspicion of committing security offenses involving contact with agents from an enemy state and carrying out tasks under their direction in exchange for payment," according to a joint statement from the Shin Bet and police.
Footage of impact at Haifa oil refinery complex
(Video:Haifa Bay Area Cities Association for Environmental Protection)
The statement said that Abu Aabed maintained contact with a foreign agent beginning in October and carried out multiple assignments, including photographing security-related sites across Israel. Among the locations she allegedly documented were IDF bases, the Haifa oil refineries and other sensitive sites. The refineries have been targeted at least twice during the current war. Prosecutors say she also passed information about an Israeli citizen who is a former member of the security establishment.
The indictment states that Abu Aabed worked for a company providing services to the Transportation Ministry, giving her access to computerized systems containing sensitive personal data. She is accused of sharing details about her workplace, how the systems operate, and even visual documentation of them, along with personal information tied to a security-related individual.
According to the charges, she photographed multiple sites, including a Home Front Command base in Nazareth, the Haifa refineries, the Golani Brigade memorial and an Amdocs building in Nazareth, and sent live locations of these places. She also documented commercial centers, buildings and other locations across Nazareth, including military-related sites. At the request of her handler, she later opened a cryptocurrency wallet and received payments through it for her activities.
The indictment says that beginning in October 2025, Abu Aabed was in ongoing contact with a figure identifying himself as “Winema Ton,” who was acting on behalf of Iranian intelligence. Initially, the assignments were presented as harmless photography jobs, but prosecutors say she later understood the hostile nature of the operation.
Investigators said she continued carrying out the tasks despite early suspicions that she was being directed by Iranian operatives. Authorities located and seized the digital wallet, which contained hundreds of dollars she allegedly received.
In one exchange, Abu Aabed sent a link to a military recruitment website and wrote: “In my opinion, a simple and quick plan, an attack on the next generation. Destroying it is destroying the future. A filthy people, there is no need for training or recruiting children the size of adults, defeating an entire generation, as they have always acted in their exploitation.”
In the same exchange, she also sent links to the Golani Brigade’s Facebook page and website. The foreign agent reportedly instructed her not to search online for sensitive military bases due to the risk of exposure.
Authorities say Abu Aabed confessed to the allegations, and investigators have collected additional evidence, including material from her mobile phone. Prosecutors have asked the Nazareth District Court to keep her in custody until the end of legal proceedings.
“In recent years, and especially since Operation Roaring Lion, we have seen increasing efforts by Iranian intelligence to recruit and operate Israeli citizens within Israel,” the Shin Bet and police said in joint a statement. “We again warn the public against contact with foreign agents from enemy states or unidentified actors, and against carrying out tasks for them for payment or any other reason.”
“Beyond the severe harm to national security, those involved in such activity face criminal prosecution and significant penalties,” the statement said.