Iran-Linked Spyware Targets Israelis in Missile Attack

During an Iranian missile barrage on Israel, some Android users received text messages purporting to provide real-time bomb shelter locations, but clicking the links instead installed spyware that granted hackers access to the devices' cameras, locations, and personal data. The operation, attributed to Iran-linked actors, marked a coordinated blend of digital and physical assaults amid escalating tensions in the Middle East conflict.

The deceptive texts arrived precisely as missiles struck, catching recipients amid evacuations to safety. "This was sent to people while they were running to shelters to defend themselves," said Gil Messing, chief of staff at cybersecurity firm Check Point Research. "The fact it's synced and at the same minute is a first." Experts attribute the tactic to Iran's strategy of leveraging cyber tools to offset military limitations, integrating hacking with conventional warfare to gather intelligence, sow fear, and disrupt operations without direct confrontation.

Cyberactivity tied to the conflict has surged, with investigators at Utah-based DigiCert documenting nearly 5,800 attacks by about 50 Iran-affiliated groups. Most targeted U.S. and Israeli...