28/07/2022
Cybersecurity Topic: Smishing = SMS + Phishing
Smishing is a cyber-attack using misleading text messages to your mobile device, tricking you to respond or act. For many of us, text messages feel more legitimate than the typical email. Smishing attacks may be harder to detect than phishing since there is less information and fewer clues for us to pick up on that something is wrong or suspicious. When you receive a text message that seems odd, start by asking yourself does this message make sense, and why am I receiving it?
Here are some of the most common clues of an attack:
A tremendous sense of urgency,
Message is asking for personal information, passwords or other sensitive information
Message sounds too good to be true? No you did not win the lottery, especially the one you never entered😊
Message appears to come from a co-worker or friend’s phone number, but the wording does not sound like them. Their phone number may have been spoofed by an attacker.
Here are some examples of attacks:
You get a message that urges you to “check out” a video or picture (“you won’t believe this!”). If the message looks like it is from someone you know, call the person on the phone to verify before you act.
You get a message from an official organization (e.g. bank, tax authority) that alarms you, Check with them directly by visiting their website or calling them directly using the phone number found on their website. Do not use the number in the message. Bear in mind that most government agencies, such as tax or law enforcement agencies, won’t contact you via text message.
Email and messaging attacks can be combined. Gift card scams can work this way. First you get an urgent email pretending to be a friend or co-worker, asking for your cell phone number. Then you receive repeated text messages, pressuring you to purchase gift cards. Once purchased, the attackers have you scratch off the code on the back of the cards and message a picture of the codes back to them.
When it comes to messaging attacks, you are your own best defense!