How a hacking campaign targeted high-profile Gmail and WhatsApp users across the Middle East

On 18 January 2026, DataBreaches[.]Net reported that UK-based Iranian activist Nariman Gharib tweeted redacted screenshots of a phishing link sent to him via a WhatsApp message. The activist warned not to click on suspicious links, saying the campaign targeted people involved in Iran-related activities. The piece notes that Iran is grappling with the longest nationwide internet shutdown in its history as anti-government protests and violent crackdowns rage across the country.

Gharib shared the full phishing link with TechCrunch and wrote up his findings, with readers invited to read more at TechCrunch, according to TechCrunch. The报道 emphasises the broader context of activity in offensive cyberspace around Iran and its adversaries, highlighting how such campaigns intersect with real-world political turmoil.