Hack-for-hire group caught targeting Android devices and iCloud backups | TechCrunch

"Researchers from Access Now documented three instances of attacks over 2023 through 2025 against two Egyptian journalists, and a journalist in Lebanon whose case was also documented by SMEX."

"Lookout concluded that the hackers behind this hacking campaign work for a hack-for-hire vendor that its researchers have codenamed BITTER, which the investigating cybersecurity companies suspect has ties to the Indian government."

"According to Lookout, the attacks go beyond members of Egyptian and Lebanese civil society, and include targets in the Bahraini and Egyptian governments, as well as targets in the United Arab Emirates, Saudi Arabia, the United Kingdom, and potentially the United States."

A hack-for-hire group has been identified targeting journalists, activists, and government officials in the Middle East and North Africa. Phishing attacks were used to access iCloud backups and messaging accounts, while Android spyware was deployed to take over devices. This trend shows governments outsourcing hacking operations to private companies. Investigations revealed attacks against Egyptian and Lebanese journalists, with targets also in Bahrain, the UAE, Saudi Arabia, the UK, and possibly the US. The group, codenamed BITTER, is suspected to have ties to the Indian government and may be linked to RebSec Solutions.

Read at TechCrunch