Smishing and SMS Fraud

Study Notes

Smishing is a type of phishing attack that uses SMS or text messages to trick victims into revealing sensitive information or installing malware.

Types of SMS fraud:
- Phishing scams: Scammers send fake SMSes that appear to be from a legitimate source, such as a bank, to trick victims into revealing personal information or login credentials.
- Malware distribution: Scammers send SMSes with malicious links or attachments that, when opened, install malware on the victim's device.
- Premium rate scams: Scammers send SMSes that prompt victims to respond to a premium rate number, resulting in unexpected charges.
Characteristics of SMS fraud:
- Urgency: Scammers often create a sense of urgency to prompt victims into taking action.
- Spoofing: Scammers may use fake sender numbers or names to make the message appear legitimate.
- ** Emotional manipulation**: Scammers may use emotional appeals to trick victims into revealing sensitive information.

Vishing is a type of phishing attack that uses voice calls to trick victims into revealing sensitive information.
Types of vishing attacks:
- Phone phishing: Scammers call victims, claiming to be from a legitimate organization, and ask for personal information or login credentials.
- Callback scams: Scammers leave a voicemail or send a text message asking victims to call a number, which is then used to scam them.
Characteristics of vishing attacks:
- Social engineering: Scammers use psychological manipulation to build trust and convince victims to reveal sensitive information.
- Impersonation: Scammers may impersonate authority figures, such as law enforcement or financial institutions, to gain credibility.
- Pressure tactics: Scammers may use high-pressure tactics to convince victims to take immediate action.

Smishing is a type of phishing attack that uses SMS or text messages to trick victims into revealing sensitive information or installing malware.

There are three types of SMS fraud: phishing scams, malware distribution, and premium rate scams.
Phishing scams involve scammers sending fake SMSes that appear to be from a legitimate source to trick victims into revealing personal information or login credentials.
Malware distribution involves scammers sending SMSes with malicious links or attachments that, when opened, install malware on the victim's device.
Premium rate scams involve scammers sending SMSes that prompt victims to respond to a premium rate number, resulting in unexpected charges.
SMS fraud often employs tactics such as urgency, spoofing, and emotional manipulation to deceive victims.

Vishing is a type of phishing attack that uses voice calls to trick victims into revealing sensitive information.
There are two types of vishing attacks: phone phishing and callback scams.
Phone phishing involves scammers calling victims, claiming to be from a legitimate organization, and asking for personal information or login credentials.
Callback scams involve scammers leaving a voicemail or sending a text message asking victims to call a number, which is then used to scam them.
Vishing attacks often employ tactics such as social engineering, impersonation, and pressure tactics to deceive victims.