Hack-for-hire group caught targeting Android devices and iCloud backups

Researchers uncovered a hack-for-hire campaign targeting journalists, activists, and government officials across the Middle East and other countries; attackers used phishing to access iCloud backups and Signal accounts and deployed Android spyware (ProSpy), with suspected links to BITTER APT and India-based hack-for-hire firms such as Appin/RebSec, according to reports from Access Now, Lookout, and SMEX.