Hackers allegedly working for the government of Lebanon stole hundreds of gigabytes from thousands of victims all over the world, and they did it using phishing, relatively simple custom-made malware with no fancy zero-day exploits, and using recycled infrastructure, according to a new report.

Security researchers from digital rights organization Electronic Frontier Foundation and security firm Lookout were able to gain access to a server used by the hackers for more than three months, collecting evidence of several years-long espionage campaigns in more than 21 countries. As they detail in their new report, the data left on the servers by the hackers points directly to a building in Beirut that houses the General Security Directorate, Lebanon’s intelligence agency.

Read full news article on motherboard.vice.com