An Israeli cybersecurity firm revealed that Iranian hackers infiltrated Arab-led hostage mediation efforts, disrupting sensitive Gaza ceasefire negotiations and targeting international organizations.
Efforts by Arab nations to broker a ceasefire in Gaza and secure the release of Israeli hostages have been thrown into turmoil after a major cyberattack traced to Iran, according to Israeli cybersecurity firm Dream.
The firm reported that Iranian-linked hackers infiltrated diplomatic networks across the Middle East, compromising communications tied to the Cairo-based mediation process. The breach exposed highly sensitive international correspondence, potentially undermining delicate negotiations.
Dream identified the attackers as Homeland Justice, a cyber unit linked to Iran’s Ministry of Intelligence and Security. The group launched a spear phishing campaign by impersonating Oman’s Ministry of Foreign Affairs. After hijacking the email account of an Omani Embassy employee in Paris, they sent malware-laced Word documents disguised as legitimate diplomatic messages.
Targets included Egyptian mediators, U.S. and Qatari representatives, and diplomats directly involved in the ceasefire talks. Beyond the region, at least ten international organizations were also attacked, including:
- United Nations (UN)
- UN Office on Drugs and Crime (UNODC)
- UNICEF
- World Bank
- African Union
- Order of Malta
Dream noted that the campaign strongly resembled a 2023 cyberattack in Albania, also attributed to Iranian state actors.
The revelation underscores how Iran is using cyberwarfare as a geopolitical weapon, not only to destabilize Israel but also to sabotage mediation channels and complicate global efforts to resolve the Gaza conflict.
