Iranian Intelligence Targets Israeli Journalists in Phishing Campaign
Iranian intelligence operatives have intensified efforts to compromise Israeli journalists by posing as trusted contacts on WhatsApp and Telegram, according to a joint statement from Israel’s Shin Bet security service and the Israel National Cyber Directorate. The attackers impersonate familiar figures, inviting targets to interviews or collaborative projects in an attempt to hack their devices, hijack accounts, and extract sensitive information.
The campaign has specifically targeted reporters from Haaretz, among others, using phishing tactics to gain unauthorized access. Israeli authorities issued the warning on Sunday, highlighting the escalating threat as part of broader Iranian cyber espionage operations. The incident underscores the growing sophistication of state-backed digital infiltration aimed at media professionals in Israel.
Haaretz TPRM report: https://www.rankiteo.com/company/haaretz
Israel National Cyber Directorate TPRM report: https://www.rankiteo.com/company/israelcyber
"id": "haaisr1786883093",
"linkid": "haaretz, israelcyber",
"type": "Cyber Attack",
"date": "8/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Journalism',
'location': 'Israel',
'name': 'Haaretz',
'type': 'Media Organization'}],
'attack_vector': 'Social Engineering (WhatsApp, Telegram)',
'data_breach': {'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Sensitive information'},
'description': 'Iranian intelligence operatives have intensified efforts to '
'compromise Israeli journalists by posing as trusted contacts '
'on WhatsApp and Telegram. The attackers impersonate familiar '
'figures, inviting targets to interviews or collaborative '
'projects in an attempt to hack their devices, hijack '
'accounts, and extract sensitive information. The campaign has '
'specifically targeted reporters from Haaretz, among others, '
'using phishing tactics to gain unauthorized access.',
'impact': {'data_compromised': 'Sensitive information',
'systems_affected': "Journalists' devices, accounts"},
'initial_access_broker': {'high_value_targets': 'Israeli journalists'},
'motivation': 'Cyber espionage, extraction of sensitive information',
'references': [{'source': 'Israel’s Shin Bet security service and the Israel '
'National Cyber Directorate'}],
'threat_actor': 'Iranian intelligence operatives',
'title': 'Iranian Intelligence Targets Israeli Journalists in Phishing '
'Campaign',
'type': 'Phishing, Cyber Espionage'}