CloudSEK’s investigation reveals a two‑year phishing and data‑harvesting campaign targeting the Middle Eastern real estate sector, which has become increasingly vulnerable due to rising foreign investor interest amid shifting geopolitical conditions. Threat actors have exploited this demand by creating sophisticated schemes to capture sensitive buyer and property data, tracking the full lifecycle of these operations—from lure creation to large‑scale harvesting. The campaign highlights growing risks for regional real estate firms and the need for stronger cybersecurity and verification measures.

Join for free to read