"Refund from the Electric Company": The new scam flooding phones
A wave of sophisticated phishing messages is flooding mobile phones in recent hours, containing a false promise of a refund from the Israel Electric Corporation in exchange for clicking an external link. The company warns that this is an attempt to steal credit card details and sensitive information, and urges the public not to click the link.
If you have received a text message in the last few hours promising you a refund from the Israel Electric Corporation (IEC) — be careful: this is a sophisticated phishing attempt aimed at stealing your credit card details and personal information. The IEC has already issued an official warning to the public and reported the incident to law enforcement authorities.
In the last few hours, a wave of text messages (SMS) and messages on messaging apps has been spreading, claiming that the customer is entitled to a refund from the IEC. According to the message, in order to claim the refund "due" to you, recipients are required to click on an external link attached to the message. This is a known social engineering method that exploits public gullibility, the names of well-known large public entities, and promises of quick financial gain to lure customers into a trap.
In practice, behind the "happy news" hides a fictitious website designed to trick you. Clicking on the link and filling in the details in the form displayed on it does not lead to receiving money, but rather to the harvesting of sensitive personal details, passwords, and credit card information directly into the hands of cybercriminals.
Following numerous inquiries and the spread of the messages, the IEC published an urgent warning to the general public:
"In the last few hours, a message has been circulating that impersonates the IEC and offers a refund via an external link. This is a fraud attempt (phishing)."
The company reiterated: "Do not click on the link and do not provide personal details or credit card information. The IEC is working on the matter with the relevant authorities. Please rely only on messages and publications appearing on the company's official channels."
What is phishing?
Phishing is a type of online attack where attackers attempt to steal sensitive information, such as passwords, credit card details, or personal information, by impersonating a trusted entity. Typically, attackers send emails, text messages, or create malicious websites that invite users to type in their personal details.
The messages or websites can look very legitimate, as if they were sent by a bank, a well-known company (like the IEC), or an online service, but in practice, they are intended to deceive the user and steal information from them. Phishing attacks require caution, so it is important to check the reliability of sources before sending personal identification details or clicking on suspicious links.
