Two prominent Egyptian journalists targeted with elaborate spearphishing campaign

Access Now and Lookout report a sophisticated hack-for-hire spearphishing campaign targeting two Egyptian journalists from October 2023 to January 2024. Attackers used fake profiles and multiple channels (masquerading as services like Apple and Signal) and maintained persistent infrastructure with overlapping domains and code similarities; evidence suggests capability to deliver Android spyware with broad data-access capabilities, though the documented targets were not breached.