CompTIA Security+ Exam Notes

CompTIA Security+ Exam Notes
Let Us Help You Pass

Saturday, October 26, 2024

Smishing 101: How to Stay Safe from Text Message Phishing

 Smishing (SMS / Text Message)

A smishing attack is a cyber attack that uses text messages to trick people into taking actions that are harmful to them, such as sharing personal information or downloading malware. The term "smishing" is a combination of the words "SMS" (short message service) and "phishing".

Here are some examples of smishing attacks:

Fraud alerts

A text message that appears to be from a bank or other financial institution asking for personal information or to verify a transaction

Package delivery

A text message that claims a package was missed or delivered incorrectly, and includes a link to a fake survey

Prize or lottery

A text message that claims the victim has won a prize, and asks them to provide personal information or click a link to claim it

Tech support

A text message that warns the victim of a problem with their device or account, and asks them to contact a tech support number

Smishing attacks can be difficult to detect because text messages often contain less information and fewer clues than emails. To protect yourself from smishing attacks, you can: Avoid clicking links in text messages, Don't provide personal data, Install apps from reputable app stores, and Never share MFA codes.

You can report potential smishing scams to the FCC and FTC.

No comments:

Post a Comment