An Iranian spy group is now impersonating journalists. They target victims through LinkedIn and WhatsApp and try to infect their devices with malware.
The first attacks were identified as of July 2020. They were impersonating as 'Deutsche Welle' and 'Jewish Journal' reporters via emails alongside WhatsApp messages that included attempts to persuade victims to open a malicious link
More details at