National Cyber Directorate warns: Phishing site steals data during input
The Directorate warns of a phishing site impersonating the Israel Post website. The site displays a fake message regarding a failed package delivery. It is recommended to check shipments only on official websites and to block credit cards immediately if data was entered.
The National Cyber Directorate has identified a website impersonating Israel Post designed to steal credit card details. The fraudulent site displays a message regarding a failed package delivery and requests an address update. Information typed on the site is transmitted to attackers in real time, even before the submit button is clicked.
The Directorate advises checking shipment status exclusively on the official website of the postal company. Those who have entered their details are urged to contact their bank or credit card issuer immediately.
Modus Operandi
The site offers a shipment tracking feature and claims a delivery attempt has failed. Users are prompted to confirm or update their address on a page that closely mimics the official one. The critical danger is that data is harvested as it is being typed, even if the user does not complete the process or click the submit button.
Security Recommendations
-
Do not click links in messages regarding unexpected deliveries.
-
Verify the shipment number and the website URL before entering any information.
-
Do not enter personal details, credit card information, or one-time codes on sites accessed via external links.
-
If in doubt, copy the link and verify it using services such as scanmysms.com.
What to do if you entered details?
Contact your bank or credit card company as soon as possible, block the card if necessary, and monitor for suspicious activity. It is also recommended to change any passwords entered on the suspicious site. You can report the incident and receive assistance by dialing 119 to reach the National Cyber Directorate.
