flâneur

SMS phishing is way too easy

bejarano.io · 258 words · saved by 1 readers

Spoofing SMS messages is very easy, we must change this to prevent fraud.

Can you guess which one of these is fake? No, they’re identical! How about these? If you paid close enough attention to the second message, you may have noticed the difference in URL hostname. The problem is, if one is real and one was spoofed, why are both messages in the same conversation? Aren’t they from different senders? Well, for all your phone knows, they were sent by the same sender. How is this possible? SMS has a field called sender ID, which is set by the sender, requires no identity verification, and can be any arbitrary short string. This allows anyone to send messages…

saved by

related reading