Israel Issues Cybersecurity Warning Over Fake Yad2 App Scam

Israel's National Cyber Directorate issued a warning on Sunday evening about a phishing scam impersonating the popular Israeli classifieds platform Yad2. The fraudulent message directs users to download an application to complete an order and arrange delivery, potentially exposing their devices to unauthorized access and data theft.

According to the Cyber Directorate, the message contains a link to a counterfeit website designed to resemble an official app store. The fake page displays seemingly legitimate features, including user ratings and download statistics, in an attempt to convince visitors that the application is trustworthy. Users are then prompted to download an installation file and authorize the installation of an app from an unknown source, bypassing the security protections typically provided by official app stores.

The Cyber Directorate confirmed that the message is an impersonation attempt and that the suspicious application remains under investigation. Preliminary findings indicate that the fake app store directs users to download an external installation file and enable installations from unrecognized sources, potentially allowing attackers to access personal information or gain control of the device.

How to Protect Yourself From the Fake App Scam

The National Cyber Directorate advises users to download applications exclusively from official platforms such as Google Play and Apple's App Store, rather than through links received in text messages or other communications. If a device displays a warning requesting permission to install an application from an unknown source, users should decline the request and immediately stop the installation process.

The Directorate also recommends reviewing the permissions requested by any application and ensuring they are appropriate for its intended function. Anyone who receives a suspicious message or has already installed the application is urged to contact the National Cyber Directorate's emergency hotline at 119 for guidance.

The warning highlights the importance of verifying the source of application downloads, particularly when messages appear to come from familiar and trusted online services.