Hack-for-Hire Spyware Campaign Targets Journalists in Middle East and North Africa

A hack-for-hire spyware campaign has targeted journalists in the Middle East and North Africa, involving the suspected Indian government-linked group Bitter and the ProSpy spyware. The campaign was uncovered through joint research by Access Now, Lookout, and SMEX, with no specific dates or technical indicators (e.g., CVEs) disclosed. The attack leveraged spearphishing techniques to deploy spyware on Android devices, compromising privacy and enabling surveillance. Affected regions include Egypt, Lebanon, and the United Arab Emirates (UAE), with the Committee to Protect Journalists (CPJ) and ESET also referenced in related reporting. The operation highlights geopolitical cyber threats against media professionals in the region.