If you have received a text message in recent hours promising you a cash refund on behalf of the Electric Company, beware: This is a sophisticated phishing attempt designed to steal your credit card details and personal information. The Israel Electric Corporation (IEC) has already issued an official public warning and raised the hazard with law enforcement authorities.
In recent hours, a wave of text messages (SMS) and messaging app alerts has been spreading, claiming that the customer is eligible to receive a financial refund from the Electric Company. According to the message, to claim the refund "owed" to you, recipients are required to click on an external link attached to the message. This is a known social engineering technique that exploits public innocence, familiar names of major public entities, and promises of quick financial gain to lure customers into the trap.
In reality, behind the "good news" lies a fake website designed to trick you. Clicking the link and filling out details in the displayed form does not lead to receiving money, but rather to the harvesting of sensitive personal information, passwords, and credit card details directly into the hands of cybercriminals.
Following a surge in inquiries and the spread of these messages, the Israel Electric Corporation issued an urgent warning to the general public: "In recent hours, a message impersonating the Electric Company offering a financial refund via an external link has been circulating. This is a fraud (phishing) attempt," the company stated. The company reiterated and emphasized: "Do not click on the link and do not provide personal or credit card details. The Electric Company is addressing the matter with the relevant authorities. Please rely only on messages and announcements appearing on the company's official channels."
What is phishing?
Phishing is a type of online attack in which attackers attempt to steal sensitive information, such as passwords, credit card details, or personal information, by impersonating a trustworthy entity. Usually, attackers send emails, text messages, or create malicious websites inviting users to type in their personal details.
The messages or websites can look very legitimate, as if sent by a bank, a well-known company (like the Electric Company), or an online service, but in reality they are designed to deceive the user and steal information. Phishing attacks require caution, so it is important to check the reliability of sources before sending personal identification details or clicking on suspicious links.