Phishing/spam via SMS
I have seen one on my own phone, and a lot of people have reported seeing them. It is an SMS mesage from a throw away or spoofed number and looks something like this:
"You have won an Apple iPad or iPhone or iPod or something from Apple, click on this www.apple.com.othercrud.baddomain"
Guess what? You have won your credentials being phished, free malware, and other badness. Ain't nothing for free. Although from the spammer/phisher point of view they get something of value from people who expect something for nothing, for little effort on the part of the spammer/phisher. Funny how that works.
Cheers,
Adrien de Beaupré
Intru-shun.ca Inc.
I will be teaching SANS Sec560 in Montreal this September, and Sec542 in Vancouver this December.
×
Diary Archives
Comments
I don't use the call or text features of my cell phone plan (there are others on the plan who do), and I instead use call and text features of apps available, that way I can still make calls and text even when my carrier is unavailable.
So, I installed call/text blocking software, just in case someone tries to contact me on my non-SIP phone or text me on my non-Internet-texting number.
Of course, I never clicked on that link because I never saw the message.
So I imagine that nothing from my phone was phished?
XANA Virus
Aug 22nd 2012
1 decade ago
So they've obviously moved their operations internationally.
ojc
Aug 22nd 2012
1 decade ago
BGC
Aug 22nd 2012
1 decade ago
I've seen a number of these claiming to be from ourselves to the customer, any that do get through the existing filters I add the domains to our DNS blackhole list.
Ahriakin
Aug 22nd 2012
1 decade ago
bacincny
Aug 22nd 2012
1 decade ago
hacks4pancakes
Aug 22nd 2012
1 decade ago