Tax Authority Phishing Campaign Targets Israelis with Fake Grants

Cyber News - Erez Dasa reports a widespread phishing campaign targeting Israelis, impersonating the Tax Authority. Attackers are sending SMS messages claiming “grants” or “investigations on behalf of the Authority,” leveraging social engineering to trick recipients.

The initial vector appears to be compromised Israeli companies. Cyber News - Erez Dasa indicates that the phishing emails are being sent from an Israeli company whose systems the attackers have somehow accessed. This suggests a potential supply chain angle or a broader compromise within the local ecosystem, making this more than just a simple spam run.

This isn’t opportunistic; it’s targeted. The use of an Israeli company’s infrastructure adds a layer of legitimacy to the phishing attempts, increasing the likelihood of success. Defenders need to recognize that attackers are increasingly leveraging local context and compromised legitimate infrastructure to bypass typical email security controls.