SMS phishing uses cell phone text messages to deliver the bait to induce people to divulge their personal information. The hook (the method used to actually capture people's information)
The SMS phishing message contains demanding target's immediate attention. Such as "We confirm that you have signed up for our lucky draw. You will be charged Rs. 8/day unless you cancel your order on this URL: [sample link]".
The #hook will be a seemingly legitimate website that asks you to "confirm" (enter) your personal financial information, such as your credit/debit card number,your ATM card PIN, SSN, email address, and other personal information. If the hook is a phone number, it normally directs to a legitimate-sounding automated voice response system, similar to the voice response systems used by many financial institutions, which will ask for the same personal information.
This is an example of a (complete) SMS phishing message in current circulation: "Notice - this is an automated message from (a local credit union), your ATM card has been suspended. To reactivate call urgent [sic] at 866-###-####."
Also other types of attacks include a automated call asking you to press certain #octal codes like #90 or #09*. Never dial these and immidiately disconnect such calls...
0 comments:
Post a Comment