New wave of cyberattacks in Israel - scammers steal access to data

Israel's National Cyber Security Directorate has warned of a new wave of cyberattacks: scammers are sending fake emails purporting to be from SharePoint to gain access to Microsoft accounts. The emails may come from hacked addresses of acquaintances. Clicking the link leads to a fake login page where login, password, and 2FA codes are stolen. Personal and corporate data are at risk. It is recommended not to open unexpected documents and to check website addresses.

Israel's National Cyber Security Directorate has warned of a new wave of cyber fraud. Attackers are sending fake emails purporting to be from the SharePoint service, offering to open a financial document, invoice, or payment notification. The emails may come from addresses of acquaintances or organizations whose accounts were previously hacked. Clicking the link leads to a fake Microsoft login page, where login, password, and two-factor authentication code are requested. With this data, scammers can take over email, correspondence, confidential documents, and use the account for further attacks. Not only personal data but also corporate information is at risk: a breach of work email can lead to leakage of internal documents and financial information. Israelis are advised not to open unexpected documents, verify requests through another communication channel, carefully check the website address, and not provide two-factor authentication codes. If data has already been entered, they should immediately change passwords, terminate active sessions, and notify the information security service.