Security Affairs
Crooks abuse some SMS PVA services that allow their customers to create disposable user accounts to conduct malicious activities. While investigating SMS PVA services (phone-verified account services), Trend Micro researchers discovered a rogue platform using a botnet of thousands of Android devices used to carry out malicious activities. SMS PVA services provide alternative mobile numbers […]
CyberSecurity Dive
How to Guard Against SMS Phishing In Your Organization with Secure Service Desk Verification.
HACKRead
Cybercriminals are exploiting vulnerabilities in cloud systems to perpetrate SMS scams including Smishing or SMS phishing.
HACKRead
Cybercriminals are exploiting vulnerabilities in cloud systems to perpetrate SMS scams including Smishing or SMS phishing.
Trend Micro
Certain SMS PVA services allow their customers to create disposable user profiles or register multiple accounts on many popular online platforms. These services can be abused by criminals to conduct fraud or other malicious activities.
Bleeping Computer
A team of university researchers has devised a new side-channel attack named 'Freaky Leaky SMS,' which relies on the timing of SMS delivery reports to deduce a recipient's location.
DarkReading
SMS campaigns targeting members of the public in the United Arab Emirates have been detected.
Infosecurity News
According to Enea, these campaigns use cloud storage platforms to host malicious websites, sending links via SMS to bypass firewalls
Infosecurity News
The action was prompted by the Android malware spreading aggressively through SMS around the world
Trend Micro
In this three-part blog entry, our team explored SMS PVA, a service built on top of a global bot network that compromises smartphone cybersecurity as we know it.
Bleeping Computer
Cybercriminals target Rogers customers with a new SMS phishing campaign pretending to be refunds for last week's Canada-wide wireless outage.
DarkReading
Making the option available only to paid subscribers — while also claiming SMS authentication is broken — doesn't make sense, some say. Is it a cash grab?
The Hacker News
Twitter is changing its 2FA policy, limiting the use of SMS-based authentication to its Blue subscribers only.
The Hacker News
Hackers exploited a flaw in SMS-based phone-verified accounts (PVA) services to infect thousands of Android devices with malware.
Bleeping Computer
Signal says it will start to phase out SMS and MMS message support from its Android app to streamline the user experience and prioritize security and privacy.
Bleeping Computer
Finland's National Cyber Security Center (NCSC-FI) has issued a warning about the FluBot Android malware infections increasing due to a new campaign that relies on SMS and MMS for distribution.
Latest Hacking News
Twitter has recently announced a change that baffled many users previously using SMS-based two-factor authentication for account sign-ins. Starting March 2023, Twitter will only allow Twitter Blue subscribers to use SMS-based 2FA. Nonetheless, other multi-factor
ZDNet
Businesses not registered with the Singapore SMS Sender ID Registry by January 31 will have their messages labelled as "Likely-SCAM", as the country rolls out more measures to combat online scams.
Bleeping Computer
Security flaws in Telit Cinterion cellular modems, widely used in sectors including industrial, healthcare, and telecommunications, could allow remote attackers to execute arbitrary code via SMS.
Bleeping Computer
The Federal Communications Commission (FCC) warned Americans of an increasing wave of SMS (Short Message Service) phishing attacks attempting to steal their personal information and money.
Trend Micro
In this final part, we discuss the countries most affected by SMS PVA services as well as lay out several recommendations to mitigate the risks of such threats.
Bleeping Computer
Cloud communications company Twilio says some of its customers' data was accessed by attackers who breached internal systems after stealing employee credentials in an SMS phishing attack.
Bleeping Computer
Valve has announced implementing additional security measures for developers publishing games on Steam, including SMS-based confirmation codes. This is to deal with a recent outbreak of malicious updates pushing malware from compromised publisher accounts.
Bleeping Computer
Security flaws in Telit Cinterion cellular modems, widely used in sectors including industrial, healthcare, and telecommunications, could allow remote attackers to execute arbitrary code via SMS.
Cyber Security News
UNC3944 has frequently employed phone-based social engineering and SMS phishing attacks to gain credentials and escalate access to target organizations.
Security Affairs
Cisco Duo warns that a data breach involving one of its telephony suppliers exposed MFA messages it sent via SMS and VOIP to its customers.
Bleeping Computer
Cisco Duo's security team warns that hackers stole some customers' VoIP and SMS logs for multi-factor authentication (MFA) messages in a cyberattack on their telephony provider.
Bleeping Computer
On Friday, the Federal Bureau of Investigation warned of a massive ongoing wave of SMS phishing attacks targeting Americans with lures regarding unpaid road toll fees.
Latest Hacking News
SMS delivery reports not only let the sender know about the message receipt, but can also leak the recipient’s location. This is what researchers have demonstrated in their recent study, showing how receiving a silent
Cyber Security News
Evina's security researcher Maxime Ingrao identified a fake Android SMS APP on Google Play ‘Symoo’, with 100,000 downloads actually serving as an SMS relay for a service that creates accounts for websites including Microsoft, Google, Instagram, Telegram, and Facebook.
The Hacker News
Software company Retool suffered a breach with 27 customer accounts hacked after an SMS-based attack. Google Account sync blamed for the breach, turni
Security Affairs
Twitter has announced that the platform will allow using the SMS-based two-factor authentication (2FA) only to its Blue subscribers. To date, Twitter has offered three methods of 2FA: text message, authentication app, and security key. However, the company has announced that it will limit the use of SMS-based two-factor authentication (2FA) only to its Blue subscribers. The […]
Bleeping Computer
Twitter has announced that it will no longer support SMS two-factor authentication unless you pay for a Twitter Blue subscription. However, there are more secure options for multi-factor authentication, which we describe below.
The Hacker News
A 19-year-old Sydney teenager has been arrested for allegedly using Optus data to extort victims in SMS scams.
DarkReading
The text messages threaten fines if the victims don't provide personal and financial details.
Trend Micro
In part two of this blog entry, we further investigate the innings of smspva.net and discuss the impact and implications of such services.
Infosecurity News
The move comes after threat actors compromised developers’ accounts
Infosecurity News
Telco EE warns of surge in text-based phishing messages as Christmas approaches
Cyber Security News
Flubot malware sends text messages to both Androids and iPhones. There are a large number of different types of Flubot text messages and scammers are updating them all the time.
Cyber Security News
Coinbase, the renowned cryptocurrency exchange platform, has reported that during the recent security breach, the perpetrator managed to obtain contact information associated with several employees.
Bleeping Computer
The Medusa Android banking Trojan is seeing increased infection rates as it targets more geographic regions to steal online credentials and perform financial fraud.
Bleeping Computer
Coinbase cryptocurrency exchange platform has disclosed that an unknown threat actor stole the login credentials of one of its employees in an attempt to gain remote access to the company's systems.
Bleeping Computer
The Internal Revenue Service (IRS) warned Americans of an exponential rise in IRS-themed text message phishing attacks trying to steal their financial and personal information in the last few weeks.
CSO
Authentication is complex and not enough people use it, but no-code developer Descope thinks it has found the answer: WhatsApp.
SecurityWeek
Breach exposed phone numbers, phone carriers, metadata and other logs that could lead to downstream social engineering attacks.
The Hacker News
Cryptocurrency users BEWARE! Sophisticated phishing kit actively impersonating major exchanges.
Bleeping Computer
Multinational shipping company UPS is alerting Canadian customers that some of their personal information might have been exposed via its online package look-up tools and abused in phishing attacks.
The Hacker News
Customer engagement platform Twilio suffered a data breach after hackers gained "unauthorised access" by tricking some employees.
The Hacker News
Watch out for phishing scams! PostalFurious, a Chinese-speaking gang, is masquerading as postal services to trick users in the U.A.E.
Cyber Security News
In the ever-evolving realm of cybersecurity, Promon, a trailblazer in mobile security solutions, has brought a novel adversary—FjordPhantom.
The Hacker News
An employee at the well-known cryptocurrency exchange platform, Coinbase, recently fell victim to a cyber attack scam, leading to minor data breach.
ZDNet
Unless you're a Twitter Blue subscriber, you'll soon lose access to text-message two-factor authentication. But don't worry. There are better ways to secure your account.
Bleeping Computer
Syniverse, a service provider for most telecommunications companies, disclosed that hackers had access to its databases over the past five years and compromised login credentials belonging to hundreds of customers.
ZDNet
The company discovered the network disruption on Monday night.
ZDNet
Hackers in Iran have been able to convince citizens to download malicious applications by claiming judicial complaints have been filed against them.
Trend Micro
SMS PVA services' use of infected Android phones reveals flaws in SMS verification, and 'Russian state-sponsored cyber actors' cited in hacks of U.S. defense contractors
Ars Technica
No message, profile, or other data exposed—but SMS remains a weakness.
Bleeping Computer
A fake Android SMS application, with 100,000 downloads on the Google Play store, has been discovered to secretly act as an SMS relay for an account creation service for sites like Microsoft, Google, Instagram, Telegram, and Facebook
Ars Technica
Security experts baffled by move to require paid subscription to get SMS sign-in codes.
The Hacker News
A malicious Python script allowing cybercriminals to launch SMS phishing attacks via AWS SNS
CyberNews
Millions of two-factor authentication (2FA) codes, sent as SMS messages by tech giants, were being leaked online.
Infosecurity News
Hackers discussed how to use stolen payment cards and bypass geo controls and SMS limitations
SC Magazine
A Python script for sending bulk SMS texts with phishing links relies on hijacked AWS SNS tenants.
Ars Technica
Campaign used email, SMS, and voice calls to trick targets into divulging master passwords.
Latest Hacking News
Box patched the MFA bypass vulnerability following the bug report. The flaw existed in SMS-based OTP authentication mechanism.
Ars Technica
Banks still use SMS for 2FA, much to the satisfaction of crooks.
DarkReading
Hackers are seeking sensitive personal information on user devices, such as banking data and SMS messages.
SecurityWeek
The Antidot Android banking trojan snoops on users and steals their credentials, contacts, and SMS messages.
ZDNet
New measures, which include the removal of hyperlinks from email or SMS messages sent to customers and a 12-hour delay in activation of software tokens, will be implemented within two weeks and follow a spate of phishing SMS scams that wiped some victims of their life savings.
ZDNet
SMS phishing scams that led to SG$13.7 million in losses have prompted additional security measures to be introduced, including the need for SMS service providers to check against a registry before sending through messages and for banks to develop "more versatile" AI algorithms to detect suspicious transactions.
The Hacker News
Fluhorse has evolved and become more sophisticated. It conceals its encrypted payload and listens to your SMS messages.
ThreatPost
Attackers use socially engineered SMS messages and malware to compromise tens of thousands of devices and drain user bank accounts.
The Hacker News
Discover the dangerous capabilities of SpyNote, an Android banking trojan. It records audio, logs keystrokes, SMS messages, and captures screenshots.
SecurityWeek
Okta says mobile phone numbers and SMS messages containing one-time passwords were compromised during the Twilio cyberattack.
The Cyber Express
Cisco Duo's security team has issued a warning regarding a cyberattack that compromised some customers' VoIP and SMS logs, potentially
SecurityWeek
A critical vulnerability in the Cinterion cellular modems can be exploited for remote code execution via SMS messages.
Bleeping Computer
UK's National Cyber Security Center (NCSC) has published new guidance for organizations to follow when communicating with customers via SMS or phone calls.
CyberScoop
Technology meant to limit robocalls has pushed scammers toward SMS-based attacks, which experts say can be even more dangerous.
CyberNews
1,900 Signal users are at risk as attackers may have accessed their phone numbers and SMS registration codes following the Twilio breach.
HACKRead
Watch out for the new CHAVECLOAK banking Trojan as it spreads its infection through SMS phishing, phishing emails, and hacked websites.
The Hacker News
Chinese-speaking threat actors, known as the Smishing Triad, are posing as UAE authorities to gather sensitive information via malicious SMS messages.
ThreatPost
A security bug in the file-sharing cloud app could have allowed attackers using stolen credentials to skate by one-time SMS code verification requirements.
Bleeping Computer
Vodafone Portugal suffered a cyberattack causing country-wide service outages, including the disruption of 4G/5G data networks, SMS texts, and television services.
Bleeping Computer
The BRATA Android remote access trojan (RAT) has been spotted in Italy, with threat actors calling victims of SMS attacks to steal their online banking credentials.
Bleeping Computer
Crypto exchange Coinbase disclosed that a threat actor stole cryptocurrency from 6,000 customers after using a vulnerability to bypass the company's SMS multi-factor authentication security feature.
DarkReading
With names, email addresses, and mobile numbers from underground databases, one person in five is at risk of account compromise even with SMS two-factor authentication in place.
HACKRead
Group-IB has discovered a new iOS Trojan, dubbed GoldPickaxe.iOS designed to steal facial recognition data, ID documents, and intercept SMS.
Bleeping Computer
Numerous Payoneer users in Argentina report waking up to find that their 2FA-protected accounts were hacked and funds stolen after receiving SMS OTP codes while they were sleeping.
CyberNews
Cisco Duo has warned customers that a threat actor gained access to its vendor systems and obtained a set of MFA SMS logs pertaining to customer accounts.
Bleeping Computer
The threat actor behind the Twilio hack used their access to steal one-time passwords (OTPs) delivered over SMS to from customers of Okta identity and access management company.
Bleeping Computer
The threat actor behind the Twilio hack used their access to steal one-time passwords (OTPs) delivered over SMS to from customers of Okta identity and access management company.
ThreatPost
Joker malware was found lurking in the Color Message app, ready to fleece unsuspecting users with premium SMS charges.
SecurityWeek
Europol today announced the takedown of FluBot, a piece of mobile malware targeting both Android and iOS devices that has been fast-spreading via SMS messages.
Cyber Security News
Watch out for harmful Finnish SMS which tricks Android device users into loading banking malware by dialing a spoofed service number.
Bleeping Computer
The Roaming Mantis SMS phishing campaign has finally reached Europe, as researchers detect campaigns targeting Android and iPhone users in Germany and France with malicious apps and phishing pages.
ZDNet
Just 4% of IT decision-makers are able to correctly identify phishing email and SMS messages, but 47% remain unconcerned about such risks in their organisation.
Bleeping Computer
Cloudflare says some of its employees' credentials were also stolen in an SMS phishing attack very similar to the one that led to Twilio's network being breached last week.
The Hacker News
Microsoft warns of the growing threat from "Storm-0539," an emerging group orchestrating gift card fraud via sophisticated email and SMS phishing atta
DataBreaches
Eileen Yu reports: An Australian man has been sentenced to jail for more than two years over an SMS phishing scam, during which he stole AU$100,000 ($69,751)...
DataBreaches
Well, this is a bit different. Did Fauquier County Public Schools in Virginia contribute to its own attack by noting employees could use free online SMS MFA...
Loading more articles....