Bitter-Linked Hack-for-Hire Campaign Targets Journalists Across MENA Region

Executive summary: Multiple security researchers report a targeted hack-for-hire campaign (2023–2025) that used spear-phishing via social media and messaging apps, OAuth consent-based phishing pages, and fake domains to target journalists and activists across the MENA region; infrastructure and malware lures (including Android spyware ProSpy and similarities to Dracarys) link the activity to Bitter or an operation with ties to that cluster, and at least one Apple account was fully compromised.