Signal

Hack-for-hire campaign linked to Bitter APT targets journalists and activists in MENA

Evidence first: scan the strongest sources, then decide whether to go deeper.

redditrss
threat_actorsexploitsbreachesincident_responsesecurity_policy
Trend in the last 24h
Archive source links paid
Current signal detail is open. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Top sources
  • The Hacker News - Bitter-linked hack-for-hire campaign
    thehackernews.com
  • Access Now - MENA phishing campaign report (via Reddit)
    accessnow.org
  • Infosecurity Magazine - Middle East hack operation Bitter
    infosecurity-magazine.com
Overview

A spear-phishing campaign active from 2023 to 2024 targeted journalists, activists, and government officials across the Middle East and North Africa (MENA).

Score total
1.53
Momentum 24h
3
Posts
3
Origins
3
Source types
2
Duplicate ratio
0%
Why now
  • Recent investigations have exposed the campaign's scope and attribution.
  • The campaign was active recently, between 2023 and 2024, indicating ongoing threats.
  • Timely for organizations to update incident response and security policies against such threats.
Why it matters
  • Highlights ongoing cyber espionage and repression targeting civil society in MENA.
  • Demonstrates use of hack-for-hire services linked to state-affiliated threat actors.
  • Raises awareness for journalists and activists to strengthen phishing defenses.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: medium
Recurring claims
  • A hack-for-hire spear-phishing campaign targeted journalists and activists across MENA between 2023 and 2024.
  • The campaign is linked to the Bitter APT group, suspected to have ties to the Indian government.
How sources frame it
  • The Hacker News: neutral
Consolidated multiple sources to provide a clear overview of the Bitter-linked hack-for-hire campaign targeting MENA civil society.
All evidence
All evidence
The Hacker News - Bitter-linked hack-for-hire campaign
thehackernews.com
Access Now - MENA phishing campaign report (via Reddit)
accessnow.org
Infosecurity Magazine - Middle East hack operation Bitter
infosecurity-magazine.com
Show filters & breakdown
Posts loaded: 0Publishers: 3Origin domains: -Duplicates: -
Showing 3 / 0
Top publishers (this list)
  • thehackernews.com (1)
  • accessnow.org (1)
  • infosecurity-magazine.com (1)
Top origin domains (this list)
  • Unknown (3)