Security researchers have uncovered a sophisticated mobile spyware campaign targeting Israeli users through fraudulent SMS messages impersonating Israel’s Home Front Command. The operation distributes a trojanized Android version of the Red Alert rocket warning application, a widely used tool that notifies civilians of incoming missile threats.

The campaign was identified by the Acronis Threat Research Unit (TRU), which reported that the malicious application preserves the legitimate alert functionality while secretly running spyware in the background.