Spear Phishing Text Message Attacks
It is a good practice to remind your employees to remain vigilant when handling correspondence via email, phone, and text message. We have heard reports of several recent spoofed text messages. This is when a message comes from a known contact, but it is not the person’s actual phone number, it just appears as it is. This is known as smishing and is a common vector of spear phishing or targeted phishing.
Most of these phishing attacks try to get the person on the other end to purchase expensive gift cards and ask them to send proof of purchase. Once the victim sends the gift card number and pin to the contact, the cybercriminal cashes in on the gift card. Leaving that person without the gift card and the money they used to purchase it. Most these attacks spoof a C-level employee and target someone lower on the staff org chart.
Right now, there are only a few things you can do when you receive these types of messages:
- Some cell providers will allow you to report the message as spam
- Block the number
- Confirm with a direct message in teams or phone call to the staff member that supposedly sent the message
- Change your phone number (unrealistic)
Do not reply directly to these messages and make sure you know your company policies when it comes to spending money or requesting your password. Most would never.
Please remain vigilant and educated on the latest attacks you and your employees could be facing. And as always, if you have questions, reach out to us today. 2W Tech is a technology solutions provider specializing in solutions for the manufacturing industry. We have a team of expert IT Consultants of staff that can help your business implement the latest and greatest cybersecurity measures.
Read More:
CISA Launches Ransomware Warning Pilot for Critical Infrastructure
Microsoft Named a Leader in the 2022 Gartner Magic Quadrant for Endpoint Protection Platforms