Eyal Golan and Omer Adam in shock: The scam stealing your bank account details
Representatives of top cultural figures have filed complaints following aggressive phishing ads offering concert tickets in collaboration with major banks. Cyber experts warn of the new danger.
A new and particularly aggressive phishing campaign circulating in recent weeks on social media uses the names and photos of well-known Israeli singers, alongside the names of banks, to steal personal information and bank details. Among the artists appearing in the ads: Omer Adam, Eyal Golan, Sarit Hadad, Idan Amedi, Osher Cohen, Odya, and Rita — who have no connection to the campaign.
The ads, some of which were created using artificial intelligence tools, offer tickets or participation in a raffle for concert tickets. In some cases, the promotion is presented as being in collaboration with Bank Leumi, and in others with Mizrahi-Tefahot. Clicking on the ad directs the user to a fake website where they are asked to "verify" their identity as a bank customer by entering details. The information entered is actually transferred to the attackers.
One victim shared online that after clicking on an ad posing as a Bank Leumi promotion, her children's savings were stolen from her account. According to her, she identified the activity shortly after, contacted the bank, and the money was returned to her account. Representatives for Eyal Golan and Omer Adam filed a police complaint following ads that used their names and a Mizrahi-Tefahot promotion without their knowledge.
Mizrahi-Tefahot also warned its customers that attempts to impersonate the bank had been identified through concert and promotion ads on social media, and clarified that the bank does not ask customers to provide personal details or login credentials in this manner.
According to Yoav Keren, CEO of the cybersecurity firm BrandShield, the use of artificial intelligence allows scammers to quickly produce ads, images, and landing pages that look more credible than before.
"This means that signs that once helped identify phishing, such as poor phrasing or amateur design, are no longer necessarily present. In the case of an ad offering a benefit from a bank, it is recommended not to enter through the link, but to check independently on the bank's official website or app if the benefit actually exists."
