logo

Israeli cyber and computer science experts phished by Iran-linked APT42

ID: 89b1bdcb-dc30-59ab-a790-b02d1671659a

STIX ID: report--89b1bdcb-dc30-59ab-a790-b02d1671659a

Feed Name: The Record from Recorded Future News

Threat Score
85/100

Date Published: 2025-06-26

Date Updated: 2026-05-01

...
...

Iran-linked APT42 (also tracked as Educated Manticore/Charming Kitten) has initiated an AI-assisted spearphishing campaign targeting Israeli journalists, cybersecurity professionals, and computer science academics. Attackers impersonated employees of cybersecurity firms and used email and WhatsApp to build trust before directing victims to credential-harvesting pages disguised as Google Meet invitations or Gmail logins, aiming to capture email credentials and 2FA codes; researchers observed parallels to prior Iranian espionage activity and warn of potential escalation.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.