Mobile users across America are facing a new threat as cybercriminals target smartphone users with malicious SMS texts. The FBI has issued a warning urging citizens to be vigilant and delete any suspicious texts received. These texts, known as smishing texts, are designed to dupe iPhone and Android users into divulging personal and financial information.
According to a report from Palo Alto Networks’ Unit 42, the scammers behind this new wave of attacks are leveraging over 10,000 domains to carry out their sinister activities. The phishing texts typically claim that the recipient has an unpaid bill that needs urgent attention to avoid penalties. The texts include links to fraudulent payment sites, with some now incorporating fake delivery service links to deceive unsuspecting victims.
The Federal Trade Commission (FTC) has cautioned against falling for these scams, emphasizing that cybercriminals not only seek to steal money but also personal information that can be used for identity theft. It is essential for recipients of such texts to avoid clicking on any links and instead verify the legitimacy of any payment requests through official channels.
The toll scam operation appears to be orchestrated by Chinese cybercrime groups, with the domain names used in the texts often featuring the .XIN top-level domain. Examples of deceptive domain names include dhl.com-new[.]xin and usps.com-tracking-helpsomg[.]xin, designed to trick users into believing they are legitimate links. However, users are advised to exercise caution and verify the authenticity of any payment requests before taking any action.
Major cities across the United States, including Annapolis, Boston, Detroit, and San Francisco, have issued warnings about the escalating toll payment phishing text campaigns. McAfee has identified Dallas, Atlanta, Los Angeles, Chicago, and Orlando as the most targeted cities for these scams, emphasizing the need for heightened vigilance among residents in these areas.
State officials advise individuals to report any suspicious texts to the Internet Crime Complaint Center (IC3) and refrain from clicking on any links or providing personal information. The FTC echoes this sentiment, urging recipients to verify the legitimacy of texts using official channels and report any unsolicited messages as spam.
As cybercriminals increasingly focus on mobile devices for their fraudulent activities, it is crucial for users to remain vigilant and skeptical of unsolicited texts. By following best practices for online security and avoiding engaging with suspicious messages, individuals can protect themselves from falling victim to phishing scams targeting smartphone users.