What is Smishing? | How Phishing Via Text Message Works

Smishing is a cyberattack that uses misleading text messages to deceive victims. Smishing attacks are considered “social engineering” because they prey on regular people via psychological manipulation. In most cases, the smishing message is designed to create a sense of urgency. These messages can also inspire fear and eventually action.

All companies should include smishing as a priority in their cybersecurity training. As more individuals continue to use personal or company-issued mobile phones for handling business-related functions, the problem is becoming more – not less – significant.

In this video, watch as an employee gets a smishing message allegedly from their boss asking for the employee to wire a $25k wire transfer.

👉Need help with your security awareness training?
VerSprite can help make awareness training part of your security strategy.

//SMISHING SECURITY TIPS//
1. Don’t assume it’s genuine just because they know your name
2. Avoid clicking on embedded links within text messages
3. Never give out personal or sensitive information via text
4. Visit the organization’s website directly
5. Phone the company or person using a trusted telephone number

VerSprite can help make security awareness training part of your security strategy.

// FIND VERSPRITE’S CYBERSECURITY TEAM ONLINE //

// ABOUT VERSPRITE //
VerSprite is a leader in risk-based cybersecurity services and PASTA threat modeling, enabling businesses to improve the protection of critical assets, ensuring compliance, and managing risk. Our mission is to help you understand and improve your organization’s cybersecurity posture. With cyberattacks increasing in number and sophistication daily, it is important to protect your organization’s assets, protect your clients, and to maintain the same, great reputation and trust you have worked hard to build. We believe that an integrated approach will result in better and more cost-effective security practices and better business outcomes overall.

#Smishing #SecurityAwareness #SecurityTraining

[VerSprite]

Are you updating your security awareness training to teach more about smishing and vishing?

Smishing and vishing campaigns have increased over the past 2 years. Vishers are using deepfake AI to increase the authenticity of their scams. We're seeing more impersonation frauds succeed where a company is de-frauded out of hundreds of thousands of dollars.