Israel fights back against 85 cyberattacks from Iran in 2025

In 2025, Israel has uncovered and thwarted a significant number of cyberattacks orchestrated by Iranian operatives targeting prominent members of Israeli society. According to the Israel Security Agency, Shin Bet, these attacks, totaling 85 as of May 2025, were aimed at collecting sensitive personal information from high-profile individuals including security officials, politicians, and journalists within Israel. The attackers primarily utilized phishing strategies aimed at deceiving victims into compromising their private data. The Iranian cyber operations have employed various platforms, such as WhatsApp, Telegram, and email, to establish contact with their targets. These attackers frequently tailored their messages to match the background and interests of the intended victims to evade suspicion and enhance their chances of success. A common tactic identified was the use of fake Google Meet links that redirected users to counterfeit login pages. Once victims entered their credentials, attackers gained access to sensitive information stored in their Google accounts, including emails, passwords, and location data. The danger posed by these cyberattacks escalates as they are not simply about theft of data; there are believed to be real-world implications driven by the collected information. Shin Bet officials have expressed concern that details such as residential addresses and social contacts can facilitate physical attacks, potentially executed by operatives recruited locally in Israel. One notable attempt involved an Iranian operative impersonating Cabinet Secretary Yossi Fuchs in attempts to defraud citizens within Israel, which ultimately failed when the target became suspicious. In response to the uptick in such cyber infiltration efforts since early 2025, Shin Bet has emphasized the importance of public vigilance and responsible online behavior. They advise the public to avoid clicking on unfamiliar links and to always maintain suspicion towards unexpected communications. As the situation currently stands, authorities have noted a concerning trend in the sophistication of the techniques used, leading them to urge enhanced awareness and cautious behavior among the general public. Overall, this series of cyberattacks reflects a broader strategy employed by Iran to compromise the safety and security of individuals in Israel.