Iranian operative impersonates Israeli US ambassador in WhatsApp phishing scam

An Iran-linked operative posed as the Israeli Ambassador to Washington, Yechiel Leiter, in WhatsApp messages sent to senior officials and media representatives. The Iranian agent used a photo of Leiter’s son, IDF Maj. (res.) Moshe Yedidyah Leiter, who was killed fighting Hamas in Gaza in November 2023.

Posing as the ambassador, the operative reportedly sought to arrange meetings by sending a fake Google Meet link. Recipients who clicked the link were prompted to enter usernames and passwords, which were then stolen.

The Israeli intelligence agency Shin Bet has warned of increasing phishing attempts by covert operatives linked to the Iranian ayatollah regime. 

“We are seeing continued, relentless attempts by hostile elements in the campaign Iran is waging against Israel to harm public figures,” a Shin Bet official announced. “The public is required to remain alert and cautious. These are cyberattacks that can be prevented through awareness, vigilance, suspicion and responsible online behavior, especially by avoiding clicking on unfamiliar links."

Shin Bet has previously prevented at least 85 cyberattacks against computers and other devices belonging to senior Israeli officials. The agency noted that in one previous case, an Iranian operative posed as Israeli Cabinet Secretary Yossi Fuchs and tried to schedule meetings with senior officials. The messages were sent from a number that showed a photo of Fuchs. 

In November 2024, Israeli Prime Minister Benjamin Netanyahu appointed American-born Leiter as Israel's next envoy to the United States. 

"Yechiel Leiter is a highly capable diplomat, an eloquent speaker and possesses a deep understanding of American culture and politics,” Netanyahu announced at the time.

“I am convinced that Yechiel will represent the State of Israel in the best way possible. I wish him success in his position,” he added.

The Iranian regime has dramatically increased its cyberwarfare activities against Israel and other countries since the Hamas-led attack on Oct. 7, 2023. 

In January 2026, Israel’s National Cyber Directorate (INCD) chief, Yossi Karadi, warned that Iran and other hostile regimes would increasingly attempt sophisticated AI-driven cyberwarfare efforts against Israel and allied nations worldwide. 

“We cannot choose when the next war will break out – but we can choose to be ready. The government sets strategy and leads national defense, but it is Israel’s cyber industry, with its innovation, agility, and operational experience, that enables Israel to be prepared for the first cyber-based war,” he stated. 

Karadi stressed that Israel developed strong cyber countermeasures in close cooperation with the United States and other allied countries. 

Last month, Radware’s 2026 Global Cyber Threat Report revealed that Israel is the world’s most geopolitically targeted country in cyberattacks. Despite Israel’s small size, 12.2% of all global politically motivated cyberattacks were focused on the Jewish state. 

Microsoft’s Digital Defense Report, released in 2025, found that the United States, Great Britain, and Israel were the world’s three most targeted countries for cyberattacks. Iran and its proxies, like Hezbollah, focused most of their attacks on Israel. By contrast, China and Russia were identified as the major sources behind cyberattacks against the U.S. and the UK.