Phishing Attack Impersonating ESET: Urgent Warning Issued in Israel
A dangerous phishing campaign is using the ESET brand to distribute malware. The company warns against clicking suspicious links and provides guidelines on how to verify email authenticity.
A new and dangerous phishing attack is leveraging the name of a well-known security company in Israel to target users. Over the past few hours, numerous phishing emails have been distributed, appearing at first glance to be sent directly from ESET. A closer inspection reveals that these emails originate from alternative addresses that have no connection to the company or its official infrastructure.
The fake messages contain a direct link designed to trigger the download of a malicious file. Once the user downloads the file to their device, the attacker gains the ability to connect remotely to the victim's computer. This level of access grants the perpetrators broad control and the ability to compromise information stored on the system.
Following the surge in this activity, company representatives issued an urgent public advisory:
"Dear customers, in the last few hours, phishing messages have been sent via email impersonating ESET from an address that does not belong to us. The message includes a link to download a malicious file, which allows the attacker to connect to the victim's computer."
The company reiterated standard information security guidelines to prevent damage:
-
Always verify the sender's address: Emails from ESET will always arrive with the eset.co.il suffix.
-
Never click on unknown links.
-
Use updated security software.
According to the official report, security systems successfully blocked these attempts for a large portion of users. "ESET users who received the message were automatically protected by our security systems. We are here to continue protecting your computer systems," stated the message, signed by the Comsecure team, ESET's representative in Israel.
Security experts continue to emphasize that basic caution and verifying the sender's identity are the most effective tools for preventing the infiltration of hostile elements. It is recommended to carefully scrutinize every email received, especially when it includes a request to click on an external link or download unknown files.
