An Israeli cybersecurity firm has reported a sophisticated cyberattack targeting diplomatic communications related to Gaza ceasefire negotiations. The attack involved phishing emails with Word documents disguised as official letters from Oman, which, when opened, installed surveillance software on victims' devices. The campaign was attributed to a group linked to Iran's Ministry of Intelligence and Security and marked a shift from previous operations that focused on infrastructure disruption or data theft. This latest effort appears to have been aimed at monitoring and potentially influencing sensitive diplomatic discussions.