SMS phishing is way too easy

Spoofing SMS messages is very easy, we must change this to prevent fraud.

Can you guess which one of these is fake? No, they’re identical! How about these? If you paid close enough attention to the second message, you may have noticed the difference in URL hostname. The problem is, if one is real and one was spoofed, why are both messages in the same conversation? Aren’t they from different senders? Well, for all your phone knows, they were sent by the same sender. How is this possible? SMS has a field called sender ID, which is set by the sender, requires no identity verification, and can be any arbitrary short string. This allows anyone to send messages…

saved by

• Tom Duan

related reading

• What Are Brands Telling You About Smishing? A Cross-Industry Evaluation of Customer Guidancearxiv.org
• Digital hygiene – karpathykarpathy.bearblog.dev
• soups2024-tabassum-sarah.pdfusenix.org
• What's the deal with weird wrong-number texts?maxread.substack.com
• Why You Should Never 'Unsubscribe' From Illicit Spam Emails and Textstwocents.lifehacker.com
• Andrej Karpathy on X: "I wrote a quick new post on "Digital Hygiene". Basically there are some no-brainer decisions you can make in your life to dramatically improve the privacy and security of your computing and this post goes over some of them. Blog post link in the reply, but copy pasting below https://t.co/gRyeVouko5" / Xx.com
• Harvard Library – EZproxy Service Retirementdl-acm-org.ezp-prod1.hul.harvard.edu
• I'm a Scam Prevention Expert, and I Got Scammed - Lupinia Studioslupinia.net
• I'm a Scam Prevention Expert, and I Got Scammed - Lupinia Studioslupinia.net
• What is a deepfake and how to detect it? - Telefónicatelefonica.com
• Email Compromise To Mass Phishing Campaigndarktrace.com
• The Newest Instagram "Exploit" is the Goofiest I've Seen0xsid.com