Iranian hackers using social media, job recruitment sites to lure Israeli spies

Mandiant and Google Cloud detail a 2017–2024 Iranian government‑directed counterintelligence campaign that used disguised social media personas and Israeli‑themed fake job recruitment sites to collect personal and professional data from Farsi‑speaking targets; attributed to state actors with limited overlap to APT42 and intended to identify individuals suspected of collaborating with foreign adversaries.