Smishing: How to protect enterprises from SMS fraud

Smishing: How to protect enterprises from SMS fraud

Can you describe how smishing (text message phishing) works and how enterprises can protect their smartphones from this threat?

    Requires Free Membership to View

    SearchSecurity.com members gain immediate and unlimited access to breaking industry news, virus alerts, new hacker threats, highly focused security newsletters, and more -- all at no cost. Join me on SearchSecurity.com today!

    Michael S. Mimoso, Editorial Director

    By submitting your registration information to SearchSecurity.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSecurity.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

Spam and phishing have expanded over time to incorporate new ways to attack users. Smishing is text message phishing, and many times, these malicious texts don't actually originate as SMS messages, but rather as emails sent through an email server to an SMS gateway. Assuming an SMS message, or even a telephone call, originated from where the message or call says it did could be risky, since caller ID can be spoofed, and emails sent through SMS gateways may not accurately report the email sender . Sprint recently issued a fraud alert about scammers trying to obtain personal information through smishes in order to perpetuate banking fraud.

The most effective protection measure against SMS fraud may be security awareness education for your smartphone users. It's important that users know not to trust every SMS message -- particularly those from institutions that hold their personal information, such as banks. Users should verify and call the official phone number of an organization or independently verify the website in question if they do receive an urgent SMS message meant to protect them from fraud.

There are also new security tools available, such as SmrtGuard from Smartphone Solutions Inc. or AhnLab Inc.'s Mobile Security products, that can be installed on smartphones to protect against malicious SMS messages, and traditional antimalware companies are expanding their smartphone protection by including antispam for text messages or adding encryption technology to their core antimalware products.

This was first published in October 2010

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.