Israel Post phishing site steals credit‑card data via real‑time keystroke capture

Cyber‐security officials identified a phishing website that mimics the official Israel Post tracking page. The fake site requests delivery details and credit‑card information and, unlike typical phishing, transmits any data typed by the victim to attackers in real time, even if the user never clicks the "send" button.

The scheme can expose personal addresses, credit‑card numbers and one‑time passwords as soon as they are entered. Authorities advise users not to follow unsolicited delivery links, to verify tracking numbers on the genuine Israel Post site, and to check URLs carefully before entering any personal data. If data has been entered on a suspicious page, victims should contact their bank or card issuer promptly and monitor accounts for unusual activity.