Israeli Cybersecurity Warns Against Malicious Invoice Email Containing Remote Access Tool

The Israeli National Cyber Directorate has issued a warning about a suspicious email allegedly sent via a known invoicing service. The email, titled "Invoice," contains a link to download a file. Upon investigation, the Cyber Directorate found that the link downloads ScreenConnect, a remote access tool typically used for legitimate purposes. However, in this case, it is part of a malicious attack scheme that could allow attackers to gain control over the user's computer. The Cyber Directorate strongly advises the public not to click the link, download the file, or approve installation of remote access software from unexpected emails. They recommend carefully scrutinizing invoice-related emails, avoiding suspicious downloads, keeping operating systems and security software updated, and maintaining current backups.