North Africa: Fresh Wave of Phishing Attacks Targeting Human Rights Defenders - New Research

press release

Attackers who use phishing scams to target human rights defenders in the Middle East and North Africa (MENA) are developing increasingly sophisticated techniques to infiltrate their accounts and bypass digital security tools, according to new research published today by Amnesty Tech.

Amnesty Tech highlighted three key tactics that attackers are employing to trick people who take extra steps to secure their accounts online.

These include asking users to reset the password on their Google accounts; tricking them into authorising apps which purport to "secure" their Outlook accounts; and abusing legitimate authentication process apps to infiltrate accounts.

Claudio Guarnieri, Senior Technologist at Amnesty Tech, said:

"Human rights defenders across MENA need to be on high alert. Even as they get better at using digital tools to secure their accounts, attackers are developing sophisticated new ways to get past these tools.

"Phishing scams can have disastrous consequences for human rights defenders and journalists in the MENA region. The stakes are very high - many activists risk arbitrary arrest, detention, or torture and other ill-treatment if their online accounts are compromised."

Amnesty Tech has published a full briefing detailing the new wave of attacks, including screenshots and detailed guidelines on what to look out for.

In July, several human rights defenders in the MENA region received new malicious emails that they shared with Amnesty. They revealed a renewed campaign of targeted phishing which Amnesty believes to be orchestrated by the same attackers - or by a closely related group - to that documented by Amnesty Tech in December last year.

The sophisticated nature of these attacks means that even good defences against phishing such as two-factor authentication are not enough to fully protect human rights defenders.

See What Everyone is Watching

More From: AI London

Don't Miss

AllAfrica publishes around 700 reports a day from more than 140 news organizations and over 500 other institutions and individuals, representing a diversity of positions on every topic. We publish news and views ranging from vigorous opponents of governments to government publications and spokespersons. Publishers named above each report are responsible for their own content, which AllAfrica does not have the legal right to edit or correct.

Articles and commentaries that identify as the publisher are produced or commissioned by AllAfrica. To address comments or complaints, please Contact us.