A man in a black hoodie wearing a Guy Fawkes mask sits in a dark room, face lit up forebodingly by his laptop screen. He types furiously, laying down dozens of lines of code. After a few moments go by ...

The phishing campaign targeted users on WhatsApp, including an Iranian-British activist, and stole the credentials of a Lebanese cabinet minister and at least one journalist.