Sciextor

Smishing

Smishing is a type of phishing scam where the attacker uses text messages or SMS to trick users into clicking on malicious links, downloading malware, or revealing personal or financial information.

The attacker may pretend to be a legitimate entity, such as a bank, a delivery company, a government department, or a person you know.

The text message may contain a sense of urgency, a reward, or a threat to persuade you to take action.

Some statistics on smishing are

• Smishing is one of the fastest-growing types of phishing scams, as more people use their smartphones for online activities
• According to a 2020 report by Proofpoint, 84% of organizations experienced at least one smishing attack in 2019
• According to a 2020 report by Kaspersky Lab, the most common topics of smishing messages in Q3 2020 were package delivery, COVID-19, and online banking
• According to a 2020 report by NortonLifeLock, 31% of Americans have fallen victim to a smishing scam
• According to a 2020 report by Get Cyber Safe, the average loss per victim of smishing scams in Canada was $1,800
• Smishing is a serious threat that can cause identity theft, fraud, ransomware, or data breaches

What can you do

• Do not respond to any text message from an unknown sender or a suspicious number. You can block or report such messages if your phone has that option
• Be careful of messages that claim to be from reputable organizations, such as banks, government agencies, or delivery services. They may use fake logos, names, or phone numbers to appear legitimate. If you are not sure about the authenticity of a message, contact the organization directly using their official website or phone number
• Do not click on any link or download any attachment in a text message unless you are absolutely sure it is safe. The link or attachment may lead you to a phishing website or install malware on your phone. You can use a web browser with security features or a security app to scan the link or attachment before opening it
• Beware of messages that create a sense of urgency or pressure you to act quickly. They may use words like “urgent”, “final notice”, “confirm”, or “verify” to make you feel anxious or curious. Do not let your emotions cloud your judgment and do not rush to follow any instructions in the message
• Never provide any personal or financial information, such as passwords, account numbers, PINs, or verification codes, via text message. Legitimate organizations will never ask you for such information through text messages. If you receive such a request, ignore it or delete it
• Use multi-factor authentication (MFA) for your online accounts, especially those that involve money or sensitive data. MFA adds an extra layer of security by requiring you to enter a code or use a device to verify your identity when you log in. This can prevent hackers from accessing your accounts even if they have your password
• Keep your phone and apps updated with the latest security patches and antivirus software. This can help you detect and remove any malware that may have infected your phone through smishing or other means. You can also enable encryption and backup features on your phone to protect your data in case of theft or loss