META Intelligence Report, August 2025. Cyber Threat Intelligence Across Middle East, Türkiye, Africa & Pakistan

Key Highlights:

Salesforce & Google Workspace Compromised

Threat actor UNC6395 exploited OAuth tokens via Salesloft Drift, impacting major organizations and prompting widespread security actions.

ShadowSilk Espionage Campaign

Cross-border data exfiltration targeting over 35 government entities across Central Asia and APAC, using spear-phishing and Telegram-based infrastructure.

Zero-Click Vulnerabilities Disclosed

Critical flaws in WhatsApp and Apple platforms could allow silent compromise. Urgent patching and device checks are recommended.

AI-Powered Investment Scams

Deepfakes and fake reviews are being used at scale to lure victims into fraudulent trading platforms, supported by industrial-grade infrastructure.

Regional Threat Landscape – META

Banking Mules Evolving Tactics

Fraud networks are using satellite connectivity, GPS spoofing, and device-based mule operations to bypass traditional detection.

Spear-Phishing Campaigns Targeting Finance Leaders

Sophisticated lures impersonating executive recruiters are delivering malware through multi-stage payloads.

QR Code Phishing on the Rise

Campaigns mimicking corporate infrastructure and personnel are targeting employee credentials.

Threat Activity Snapshot

19.5% Increase in Hacktivism

Highest number of attacks observed in Saudi Arabia, Israel, Pakistan, and Jordan.

Ransomware Up 155%

Key sectors hit: government, finance, consumer goods. Main actors: Lockbit, Meow, RansomHub, DarkVault.

META Intelligence Report, August 2025. Cyber Threat Intelligence Across Middle East, Türkiye, Africa & Pakistan

Key Highlights:

<img src="https://www.group-ib.com/wp-content/themes/gib-theme/assets/images/check-icon--lbg.svg" alt="Salesforce & Google Workspace Compromised">Salesforce & Google Workspace Compromised

<img src="https://www.group-ib.com/wp-content/themes/gib-theme/assets/images/check-icon--lbg.svg" alt="ShadowSilk Espionage Campaign">ShadowSilk Espionage Campaign

<img src="https://www.group-ib.com/wp-content/themes/gib-theme/assets/images/check-icon--lbg.svg" alt="Zero-Click Vulnerabilities Disclosed">Zero-Click Vulnerabilities Disclosed

<img src="https://www.group-ib.com/wp-content/themes/gib-theme/assets/images/check-icon--lbg.svg" alt="AI-Powered Investment Scams">AI-Powered Investment Scams

Regional Threat Landscape – META

<img src="https://www.group-ib.com/wp-content/themes/gib-theme/assets/images/check-icon--lbg.svg" alt="Banking Mules Evolving Tactics">Banking Mules Evolving Tactics

<img src="https://www.group-ib.com/wp-content/themes/gib-theme/assets/images/check-icon--lbg.svg" alt="Spear-Phishing Campaigns Targeting Finance Leaders">Spear-Phishing Campaigns Targeting Finance Leaders

<img src="https://www.group-ib.com/wp-content/themes/gib-theme/assets/images/check-icon--lbg.svg" alt="QR Code Phishing on the Rise">QR Code Phishing on the Rise