Credit: The UAE Government
This campaign had everything. Malicious URL Shortening site? CHECK. Word Document Macros? YESSIR! Fake Journalists? HOAH! PowerShell, the language time forgot? AFFIRMATIVE! Excessive Footnotes to appear “researchy”? CHECK AND DOUBLE CHECK.
Everyone gets excited that there were arrests possibly related to this effort. Keep in mind, when thinking about human rights issues, it’s the arrests themselves that you want to protest, and not the hacking teams.
There’s no CVE for this issue because CVE is dead.