What is smishing? How to protect yourself from it ?

 Smishing is a combination of SMS and phishing, in which a cybercriminal sends a false message (which stands for short message services, but you probably know it as texting). The sender's intention is always the same: to force you into providing them with private information. Smishing just substitutes SMS messages for emails.


These smishing messages convey a sense of urgency by suggesting that a quick response is necessary or that there is only a short window of time in which to do so. The smishing message might include a link that asks the recipient for private information like usernames, passwords, and credit or debit card numbers, or it might install malware on your device that can be used to eavesdrop on conversations or stealthily gather personal information in the background.

Users' greater trust of text messages than phone calls or emails, according to security experts, is one factor contributing to smishing's effectiveness. People are used to receiving text messages from businesses they do business with requesting action, thanks to the popularity of two-step authentication via text messaging, which sends you a verification number.


Tips to protect yourself from it.


1) Avoid unauthorized SMS 

Don't click unauthorized SMS If you click the link, it can download malware onto your phone or take you to a website where your personal data will be stolen. If a firm you deal with sends you a text message with a link, check to see if the message is genuine by getting in touch with the business at a number or email you trust.

 

2) Do not download apps via a text message. 

The app may be malicious and it can steal your personal information. To be secure from such acts of fraud, it is advisable to ignore unauthorized text messages. Never download text from an unknown source. 


3) Secure your phone as you secure your computer. 

Be wary of texts from senders you don't know as well as strange texts from recognised senders. Ensure that the operating system, security programs, and applications on your phone are all current.


4) Never ever share your personal information on your mobile via text message. 

Government organizations, banks, and other trustworthy businesses never send text messages requesting personal or financial data like usernames, passwords, PINs, or credit or debit card numbers. In order to confirm that the SMS you received was genuine, you should get in touch with the business via a phone number or email that you are familiar with.


5) Never save personal and financial details on your mobile. 

Never save your financial or credit card details on your smartphone. Even if hackers manage to install malware on your phone, they cannot steal the information if it isn't there.


Conclusion 

Although there are cybercriminals out there, it's vital to keep in mind that you can take precautions to stay safe. It's unlikely that opening a text message will cause you to contract a virus or damage your data. We provide the ideal cyber security bundle that works with all of your devices. Install K7 antivirus on all of your devices, including your tablet, laptop, and phone.

https://www.k7computing.com/in/home-users/?utm_source=Refferal+&utm_medium=Web+2.0&utm_campaign=Backlinks

Comments

Post a Comment

Popular posts from this blog

AMOS (MacOS Stealer)

  In the last week of April 2023, it was reported on twitter , that through a telegram channel a new malware was being offered as “Atomic MacOS Stealer”. Many samples of this malware were found on the internet. Figure 1 – Atomic MacOS Stealer Most of these samples were masquerading as an installer of various applications like Tor browser, Photoshop CC, Notion, FL studio. Figure 2 – Amos DMGfiles masquerading as different applications These are delivered as a DMGfile(Disk Image) which is the common format for software distribution & installation packages on macOS. We identified the Tor browser DMG file for the analysis. When we execute the DMG file it gets mounted and we can see the resulting window advises the user to execute the application by right clicking. Figure 3 – Tor Browser These fake applications are created by using Appify , which is used to create applications just by having the executable alone. The icons can be customised. That’s why these applications are in dif...
Read more

Ransomed by Warlock Dark Army “OFFICIALS”

  Recently we came across a tweet shared by petikvx . The tweet was on a ransomware family that had the group name similar to the WARLOCK DARK ARMY. The similarities with Chaos ransomware seem to end with the attacker group’s name. Upon analyzing the ransomware from the tweet we suspect both to be very different groups just based on their malware’s attributes. The sample under consideration was compiled using C/C++, in case of Chaos ransomware it is usually .Net. Statically looking at the file we noticed a resource entry under Bitmap with an identifier “14”, while analyzing the file code we noticed that this resource was read and loaded on to the memory. Hence we decided to dump that resource entry. Figure 1: Encrypted blob in resource section Figure 2 : Loading blob into the memory During our code analysis we found this blob was XOR encrypted. The first 16 bytes of this blob acts as the key for XOR decryption and the rest is the data which plays a key role in this ransomware’s in...
Read more

MuddyWater Back with DarkBit

  Recently, we came across a tweet about DarkBit ransomware. An Iranian APT group, named MuddyWater, is reportedly behind the DarkBit ransomware. In this blog we will explore the ransomware’s initial access method, the use of Cobalt Strike and the final ransomware payload. Initial Access Method The initial lure was delivered as an ISO file. Figure 1 – ISOFile The payload included a shortcut file (with a .doc extension) and a zip file. Figure 2 – Contents Inside ISO File The shortcut was using PrintBrm.exe to unpack the HR-Update.zip and run it as shown below. PrintBrm.exe is a windows inbuilt command line tool . Figure 3 – Shortcut File cmd.exe /c xcopy .\HR-Update.zip %TEMP% /h /y && PrintBrm.exe -r -f %TEMP%\HR-Update.zip -d %TEMP%\unzip & %TEMP%\unzip\HR-Update.exe Figure 4 – HR-Update.exe Running HR-Update.exe was a Cobalt Strike beacon. Cobalt Strike, a penetration testing tool, can also be used by attackers for gaining a foothold in the system. The final ran...
Read more