Cybersecurity researchers have uncovered a campaign targeting Israelis with a fake version of a widely used emergency warning app, designed to install spyware on victims’ phones.
The discovery was detailed in a report released by Acronis, which said the operation relies on deceptive text messages that appear to come from the Israel Defense Forces’s Home Front Command.
The messages urge recipients to download what is presented as an updated version of the official emergency alert application.

According to researchers, users who follow the instructions and install the counterfeit app unknowingly grant access to malware capable of tracking location data and extracting sensitive information from their devices, including messages, passwords, and contact lists.
The report said the campaign appears to exploit public reliance on trusted emergency systems during periods of heightened regional tensions. Investigators believe the activity may be linked to a known cyber threat actor previously associated with espionage operations in the region.
Security analysts note that while cyber activity has increased amid ongoing geopolitical developments, digital attacks have so far not played a decisive role in the broader conflict landscape.