How a hacking campaign targeted high-profile Gmail and WhatsApp users across the Middle East

**TechCrunch:** A targeted WhatsApp phishing campaign used DuckDNS-backed links and domains such as alex-fabow.online to present fake Gmail and WhatsApp pages that harvested email credentials, 2FA codes, and hijacked WhatsApp via attacker-generated QR codes; the phishing page also requested geolocation and camera/microphone permissions to enable ongoing surveillance, and an exposed attacker server held roughly 850 victim records including high-value individuals, while attribution remains unclear (possible IRGC-linked or financially motivated actors).