Shufersal Phishing Scam Targets Israeli Consumers

Cyber News - Erez Dasa reports a new phishing campaign impersonating Shufersal, a major Israeli supermarket chain. The scam lures victims with the promise of winning vouchers through a short survey. These campaigns are designed to harvest personal information and, in some cases, payment card details from unsuspecting users.

The attack vector is straightforward: victims complete a seemingly innocuous survey, after which they are redirected to a fraudulent website. This site, which has an unofficial URL, then prompts users to enter their personal and financial information under the guise of claiming their “prize.” This is a classic social engineering tactic, leveraging trust in a well-known brand.

Defenders need to educate users on the red flags. The unofficial domain is a dead giveaway, but attackers are getting better. The immediate impact is financial fraud and identity theft. For CISOs, this underscores the constant need for robust user awareness training and clear communication channels for reporting suspicious activity. Assume your users will encounter these scams, and prepare them to identify and report them.