#smishing

Attempted fraud here. Be on guard. #fraud #crime #phishing #smishing

Phishing text
2025-10-08

🎣 Novo artigo no blog!

Desta vez falo sobre um caso real que me aconteceu, explico como funcionam estes esquemas e deixo algumas dicas simples para evitar cair neles.

💡 O objectivo não é meter medo, mas sim ajudar a reconhecer os sinais de alerta e a navegar com mais segurança

💬 Já foste alvo de um ataque de phishing? Partilha a tua experiência nos comentários ou nas minhas redes.

--
🔗 Lê o artigo completo aqui: linuxe-blog.carrd.co/#pishing01

---
#Linuxe #pishing #smishing #segurança #email #sms

:mastodon: deciodecio@infosec.exchange
2025-10-08

Après la diffusion « hardware » globalisée des SMS Blasters pour envoyer des SMS frauduleux, cette belle trouvaille via honeypot de Sekoia explique une autre méthode que les cybercriminels utilisent pour nous arroser
⬇️
Des routeurs cellulaires compromis sont exploités en masse pour envoyer des campagnes de smishing (phishing par SMS).

Une campagne récente vise principalement la Belgique (mais des cibles suisses et autres pays y figurent aussi). Les attaquants abusent d’APIs SMS exposées sur des Milesight routers
⬇️
"Silent Smishing : The Hidden Abuse of Cellular Router APIs"
👇
blog.sekoia.io/silent-smishing

#CyberVeille #smishing #SMS #phishing #Milesight

2025-10-06

I'll be in your city soon
and I'd love for us to spend some time together
I don't know a thing about you
But I feel like we've known each other forever

I'm just texting you my feelings
Hoping you'll reply to me even if you don't give an iota
Because if you talk to me
I'll add your number to my spam text quota

Maybe I can pig butcher you
For a cool million and a half
Or I'll just get a couple of Apple Store cards
And have a little laugh

If nothing else I can sell
Your telephone number to a friend
And then the spam texts you get
They will never end

#smishing #poem (human)

2025-10-06

Silent Smishing: The Hidden Abuse of Cellular Router APIs

Pulse ID: 68e350e69140c381f5025b6c
Pulse Link: otx.alienvault.com/pulse/68e35
Pulse Author: Tr1sa111
Created: 2025-10-06 05:17:26

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #Smishing #bot #Tr1sa111

2025-10-02

📱 Silent Smishing: The Hidden Abuse of Cellular Router APIs

Our latest #CTI investigation from Sekoia #TDR team uncovers a novel #smishing vector abusing Milesight industrial cellular router APIs to send phishing #SMS at scale.

blog.sekoia.io/silent-smishing

The Cortex Protocolthecortexprotocol
2025-10-02

Belgium smishing surge: 572 unauthenticated Milesight routers abused for phishing SMS

Gov service impersonation (CSAM, eBox) | Active since 2022

CORTEX: IoT infrastructure = fraud platform. Audit your exposed devices NOW.

Ars Technica Newsarstechnica@c.im
2025-10-01

That annoying SMS phish you just got may have come from a box like this arstechni.ca/nf5q #Security #phishing #smishing #hacking #Biz&IT #modems #SMS

2025-10-01

Silent Smishing: The Hidden Abuse of Cellular Router APIs

This report analyzes a smishing campaign exploiting vulnerabilities in Milesight Industrial Cellular Routers to send malicious SMS messages. The attackers targeted primarily Belgian users by impersonating government services like CSAM and eBox. Over 18,000 vulnerable routers were identified globally, with at least 572 potentially exploitable. The campaign has been active since February 2022, affecting multiple European countries. The attackers used NameSilo for domain registration and Podaon SIA for hosting. The phishing infrastructure was linked to a threat actor cluster known as 'GroozaV2'. The report highlights the ongoing threat of smishing and the need for increased vigilance against unsolicited messages.

Pulse ID: 68dcdfa7bc8fcdf1e2eae202
Pulse Link: otx.alienvault.com/pulse/68dcd
Pulse Author: AlienVault
Created: 2025-10-01 08:00:39

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #Europe #Government #InfoSec #OTX #OpenThreatExchange #Phishing #RAT #SMS #Smishing #bot #AlienVault

2025-09-30

🎣 The smishing campaigns appear to have been conducted through the exploitation of vulnerable cellular routers. #belgium #devices #networks #smishing #cellular #tactics #phishing #mobile #phone #digital #online #frauds #sms #equipments #escroqueries #money #arnaques #threats [ blog.sekoia.io/silent-smishing ] #informatique

« Despite its simplicity, this method can be highly profitable, making it a persistent vector in cybercriminal operations. »

2025-09-30

A newly identified wave of smishing attacks has been traced to exploited Milesight Industrial Cellular Routers.

infosecurity-magazine.com/news

#infosec #smishing #cybersec

Andrew 🌻 Brandt 🐇threatresearch@infosec.exchange
2025-09-23

I look forward to seeing you all in #Berlin for #VirusBulletin #VB2025 on Thursday, where I will be giving a talk about #phishing, #quishing, #smishing, and making a modest proposal about how cooperation and a bit of working together could make this a crime that is impossible to accomplish.

Been a while since I posted here. I've been trying to spend time off of social media because, even here in this less-toxic social space, it seems like an activity that does not bring me joy, but fills me with dread.

virusbulletin.com/conference/v

Prof. Dr. Dennis-Kenji Kipkerkenji@chaos.social
2025-09-19

#Smishing in neuer Dimension: SMS #Phishing ist fast schon so uralt wie das Phishing selbst - darum haben Cyberkriminelle die Methode nun modifiziert, indem sie mit einem simulierten Mobilfunkmast (sog. #Stingray) durch Großstädte fahren und Smartphones dazu veranlassen, sich mit diesem zu verbinden.

Anschließend wird das Telefon auf den veralteten Mobilfunkstandard 2G gezwungen, wodurch beliebige SMS mit gefälschtem Absender direkt an das Gerät gesendet werden können:

ncsc.admin.ch/ncsc/de/home/akt

Boletines INCIBE

[Avisos de ciudadanía] Múltiples campañas de phishing y smishing suplantando a la Agencia Estatal de Administración Tributaria (AEAT)

#Phishing #smishing #AEAT #fraude

incibe.es/ciudadania/avisos/mu

PUPUWEB Blogpupuweb
2025-09-19

Scam Alert: Texts from "Erika Kirk" exploit a recent tragedy. They use emotional appeals to send malicious links that steal your info & money. Do not click or reply. Block and report.

pupuweb.com/is-the-erika-kirk-

Scam Alert: Texts from "Erika Kirk" exploit a recent tragedy. They use emotional appeals to send malicious links that steal your info & money. Do not click or reply. Block and report. #ScamAlert #CyberSecurity #Smishing
Ferrocaferromargi
2025-09-16

2/7
📧 Capítulo 1: La trampa del phishing
Explora cómo correos y SMS fraudulentos intentan robar tus datos con mensajes aparentemente fiables. Aprende a detectar los detalles que delatan la estafa y cómo actuar para no caer.
Más info y vídeo ▶️ youtu.be/snKcIwQJZpw

Client Info

Server: https://mastodon.social
Version: 2025.07
Repository: https://github.com/cyevgeniy/lmst