META Intelligence Report, August 2025. Cyber Threat Intelligence Across Middle East, Türkiye, Africa & Pakistan

Key Highlights:

Salesforce & Google Workspace Compromised

Threat actor UNC6395 exploited OAuth tokens via Salesloft Drift, impacting major organizations and prompting widespread security actions.

ShadowSilk Espionage Campaign

Cross-border data exfiltration targeting over 35 government entities across Central Asia and APAC, using spear-phishing and Telegram-based infrastructure.

Zero-Click Vulnerabilities Disclosed

Critical flaws in WhatsApp and Apple platforms could allow silent compromise. Urgent patching and device checks are recommended.

AI-Powered Investment Scams

Deepfakes and fake reviews are being used at scale to lure victims into fraudulent trading platforms, supported by industrial-grade infrastructure.

Regional Threat Landscape – META

Banking Mules Evolving Tactics

Fraud networks are using satellite connectivity, GPS spoofing, and device-based mule operations to bypass traditional detection.

Spear-Phishing Campaigns Targeting Finance Leaders

Sophisticated lures impersonating executive recruiters are delivering malware through multi-stage payloads.

QR Code Phishing on the Rise

Campaigns mimicking corporate infrastructure and personnel are targeting employee credentials.

Threat Activity Snapshot

19.5% Increase in Hacktivism

Highest number of attacks observed in Saudi Arabia, Israel, Pakistan, and Jordan.

Ransomware Up 155%

Key sectors hit: government, finance, consumer goods. Main actors: Lockbit, Meow, RansomHub, DarkVault.