Who is being targeted by the BITTER hack-for-hire group?

The BITTER hack-for-hire group is targeting journalists, activists, and government officials in the Middle East and North Africa.

What methods does the BITTER group use for attacks?

The BITTER group uses phishing attacks to access iCloud backups and Signal accounts, and deploys Android spyware disguised as messaging apps.

What is the suspected origin of the BITTER hack-for-hire group?

Cybersecurity firms suspect that the BITTER hack-for-hire group has ties to the Indian government.

Home / Technology / Hack-for-Hire Group Targets MENA Journalists

Hack-for-Hire Group Targets MENA Journalists

9 Apr

•

Summary

Hackers used phishing to steal iCloud backups and Signal messages.
Android spyware disguised as messaging apps deployed.
Hack-for-hire group BITTER suspected of Indian government ties.

Hack-for-Hire Group Targets MENA Journalists

Security researchers have uncovered a hack-for-hire operation, codenamed BITTER, specifically targeting individuals in the Middle East and North Africa. The campaign has focused on journalists, activists, and government officials, employing sophisticated phishing techniques to compromise iCloud backups and Signal messaging accounts.

This operation underscores a disturbing trend where government agencies increasingly outsource their cyber warfare capabilities to private companies. BITTER's tactics include deploying Android spyware, often disguised as legitimate messaging applications like Signal or WhatsApp, to gain full control over a target's device. These methods are noted as a potentially cheaper alternative to more advanced commercial spyware.