Israeli security agencies report surge in spear-phishing campaigns targeting officials, academics, and journalists
Hundreds of Iranian cyberattacks targeting Israeli individuals and institutions have been thwarted in recent months, according to an official statement released by Israel’s internal security agency (Shin Bet) and the National Cyber Directorate.
The statement indicates a noticeable escalation in cyber intrusion attempts, particularly targeting Google accounts belonging to government officials, defense leaders, academics, and journalists. The surge reportedly intensified following renewed regional tensions between the two countries in mid-2025.
According to the agencies, the campaigns relied primarily on social engineering rather than sophisticated technical exploits. The core tactics included:
Targeted spear-phishing campaigns
- Impersonation of trusted or known individuals
- Messages requesting verification codes or login credentials under the pretext of “security checks”
- Attempts to compromise accounts associated with Google, Telegram, and WhatsApp
The stated objective of these operations was to collect personal and professional intelligence for espionage purposes, influence operations, or potential future activities.
Official statistics further underscore the scale of the cyber threat environment.
Israel’s National Cyber Directorate reported handling more than 26,000 cyber incidents during 2025 alone — representing a 55% increase compared to 2024.
In parallel, Microsoft Threat Intelligence data identified Israel among the top three most targeted countries globally, accounting for approximately 3.5% of total worldwide cyberattacks over the past year.
The developments highlight the continued expansion of regional geopolitical tensions into cyberspace. Notably, the campaigns appear to favor social engineering and identity manipulation over complex zero-day exploitation or advanced infrastructure attacks.
The trend reinforces a broader global pattern: modern cyber conflict increasingly prioritizes human vulnerability over technical vulnerability.
The situation remains under monitoring as regional cyber activity continues to evolve.
Sources:
- The Times of Israel
- Official statement from Shin Bet and Israel National Cyber Directorate
- Microsoft Threat Intelligence Data