Iran has been using a fake facebook profile under the name of Sara Puppi to try and gather intelligence and harm Israelis, the Shin Bet revealed on Monday.
The Iranian operator of the fake account introduced themselves as a young Jewish girl with connections and business in Israel. The account added thousands of friends in a very short period, most of whom were from Israel. The Shin Bet has monitored the account since it was created.
After speaking with targets on Facebook, the Iranian operator would get the victim to switch to WhatsApp.
According to the Shin Bet, Iran and its proxies have been increasingly focusing on contacting Israelis through the internet in order to recruit them to gather intelligence and conduct terrorist activity.
The Iranian operator behind the “Sarah Puppi” account asked his operatives in Israel to locate information about Israelis who Iranian intelligence was interested in, without being aware that he was speaking with Shin Bet operatives.
The fake account asked what he thought was his Israeli operative to gather information about Israeli figures and examined the operative’s willingness to harm them. The Iranian operator exerted pressure and promised to deliver sums of money equaling thousands of dollars, while also trying to use emotional and romantic manipulation.
The Iranian operator transferred funds to the Shin Bet operative using Bitcoins. The operator used business reasons as a cover story for the missions he assigned, including a request for revenge against those who owed him money, a desire to harm personal opponents and even a desire to harm LGBTQ+ people in general.
The Iranian operator also tried to get the Shin Bet operative he thought was working for him to put up signs inciting against Russian President Vladimir Putin in an attempt to harm relations between Israel and Russia.
The fake account operator also tried to gather intelligence and harm representatives of companies and diplomats from Arab countries working in Israel.
“This activity of the Shin Bet exposed Iranian practices alongside a desire to harm Israeli personalities and Israel’s foreign relations with various countries,” said the Shin Bet. “The Shin Bet, in accordance with its mission under the law, continues to act in the face of other similar moves by Iranians and terrorist organizations in cyberspace.”
The security establishment called on Israeli citizens to be vigilant and cautious in light of the threat posed by terrorist elements on social media and to report any unusual contact to the Israel Police.
Terrorist groups, including Hamas, have often used fake Facebook accounts to target Israelis and gather intelligence.
Last month, Cybereason reported that it had tracked two Hamas-affiliated groups that were targeting Israeli individuals with sophisticated social engineering techniques in order to deliver spyware to extract sensitive information from Windows and Android devices.
The Hamas groups used fake Facebook profiles to trick targeted individuals into downloading trojanized direct message applications for Android and PC.
