Rotten Apple: An Invasive Threat Actor Targeting Civil Society in Lebanon

A sophisticated, persistent spear-phishing campaign—likely linked to the BITTER APT group—successfully compromised a high-profile Lebanese journalist’s Apple account via real-time 2FA interception and credential theft, highlighting the expanding reach and technical prowess of espionage actors targeting civil society across the Middle East and North Africa.