German authorities have issued a stark warning regarding escalating cyber-espionage operations targeting prominent Nahost (Middle East) experts, Jewish institutions and Iranian expatriate communities within Germany. A security advisory, leaked to “Tagesspiegel” and dated December 18th, highlights the sophistication and resources of the group conducting the attacks, prompting calls for increased protection for vulnerable populations.
The Federal Office for the Protection of the Constitution (Verfassungsschutz) reports a surge in targeted cyber intrusions, indicating a concerted effort to gather intelligence on specific individuals and groups. Those flagged as particularly at risk include individuals involved in advocating for human rights, women’s rights and LGBTQ+ rights within Iran, as well as those maintaining contact with Iranian regime opponents.
The operation appears to involve the distribution of malicious software designed to exfiltrate vast quantities of data, including emails, documents, contact information and calendar entries. Alarmingly, the advisory suggests that individuals associated with Jewish or pro-Israel organizations, alongside academics and security policy experts specializing in the Middle East, are being actively lured into downloading this malware.
The attackers reportedly employ a patient and deceptive approach, cultivating relationships over weeks. Common tactics involve innocuous requests for interviews or invitations to conferences and events. There is concern that, once established, access gained through compromised devices could allow for the covert recording of video conferencing and telephone calls, potentially exposing sensitive information not only about the primary target but also about their wider professional and personal networks.
Konstantin von Notz, deputy chair of the Bundestag’s control committee from the Green Party, underscored the gravity of the situation, stating that the warnings “must be taken very seriously from a security policy perspective”. He emphasized the urgent need to enhance protections for Iranian dissidents residing in Germany while advocating for a continuous adaptation of security measures for Jewish institutions. Von Notz decried the “highly disturbing and indeed worrying” intensity and aggression demonstrated by Iranian intelligence operations within Germany, raising questions about the extent of Tehran’s reach and the adequacy of current countermeasures. The incident is likely to fuel debate regarding Germany’s foreign policy stance toward Iran and the balance between supporting dissident voices and safeguarding vulnerable communities within its borders.