Decent number of folks are posting stuff related. Another one that's related that takes a bit of reading to get to is the Reuters article that tipped off a lot of this type of investigation back in 2022.
The website was a supposed soccer fan website, Iraniangoals.com, and it was (opinion) criminally badly designed. Type in a search bar request and it's really your password, that then goes right to a secret messaging app...
> Marczak and Edwards quickly discovered that the secret messaging window hidden inside Iraniangoals.com could be spotted by simply right-clicking on the page to bring up the website’s coding. This code contained descriptions of secret functions, including the words “message” and “compose” – easily found clues that a messaging capability had been built into the site. The coding for the search bar that triggered the secret messaging software was labeled “password.”
The website was a supposed soccer fan website, Iraniangoals.com, and it was (opinion) criminally badly designed. Type in a search bar request and it's really your password, that then goes right to a secret messaging app...
https://www.reuters.com/investigates/special-report/usa-spie... America’s Throwaway Spies, Joel Schectman, Bozorgmehr Sharafedin, Corinne Perkins, John Emerson, Marla Dickerson, Ronnie Greene, and Kieran Murray