Body
SMS phishing, also known as "smishing," is a type of cyber attack where fraudsters send fake text messages to trick individuals into sharing sensitive information, downloading malware, or sending money. The term "smishing" combines "SMS" (short message service) and "phishing." These attacks are becoming increasingly common as more people use mobile devices for work and personal communication
How to Identify SMS Phishing
Identifying SMS phishing can be challenging, but there are several signs to look out for:
- Unexpected Messages: Be cautious of unsolicited messages from unknown senders, especially if they request sensitive information or prompt you to click on suspicious links
- Urgency and Pressure: Phishing messages often create a sense of urgency, urging you to act quickly to avoid negative consequences
- Suspicious Links: Avoid clicking on links within text messages. On a computer, you can hover over a link to see where it leads, but this is harder to do on a mobile device
- Poor Grammar and Spelling: Many phishing messages contain spelling and grammatical errors
- Verify the Sender: Check the sender's phone number or email address. Sometimes, the display name may look legitimate, but the actual address is not
Example of SMS Phishing
Remember, The Service Desk DOES NOT SEND TEXTS. Only emails and phone calls. In this example, the threat actor is messaging a SHU student pretending to be the SHU Service Desk (The Factory):
Protecting Yourself from SMS Phishing
To protect yourself from falling victim to SMS phishing scams, follow these steps:
- Stay Skeptical: Treat all unsolicited messages with caution.
- Verify the Sender: Independently verify the legitimacy of the message using official contact information from trusted sources.
- Do Not Click on Links: Avoid clicking on links within text messages.
- Protect Your Personal Information: Never share sensitive information via text message.
- Report Suspicious Messages: Promptly report any phishing messages to IT Security or forward them to 7726 (SPAM), the spam reporting service run by the mobile industry
By following these guidelines, you can minimize the risk of falling prey to SMS phishing scams and safeguard your personal information.