A new wave of cybercrime is sweeping through the United States, and the FBI has gone as far as giving an ultimatum to all smartphone owners: delete all suspicious messages immediately. Cyberhacking has opened the door to a ruthless smishing operation, using text messages to trick individuals into providing personal and financial information. The scope of the operation, with over 10,000 known spoofed domains, has never been seen before.
How the Scam Works
These SMS scams, referred to as smishing attacks, usually arrive in the form of messages purporting to be from the toll authorities, delivery companies, or other official organizations, stating that the recipient needs to pay pending fees. The victims are given spoofed links, which point to phishing sites that try to capture their credentials, bank account details, and identification information. Unlike phishing via email, these SMS messages are crafted to evade the usual security screens, so they are hard to intercept.
Deceptive Practices And False Sites
The trickery is that the websites spoof official payment sites as well as legitimate delivery services. Palo Alto Networks’ Unit 42 researchers discovered that the phishing websites trend, and the majority include a spoofed “.XIN” top-level domain, which has been a Chinese cybercrime collective favorite domain. The websites spoof names that are legitimate-appearing, with sometimes variable brand names slightly different.
States and Cities Hit the Hardest
The Federal Trade Commission also cautioned against the same, making it clear that genuine delivery businesses and toll services would never ask clients to click on random links via text messages. On the contrary, individuals should visit the websites or contact customer service to confirm pending payments. Authorities in many states, including Louisiana, Georgia, Maryland, and Ohio, witnessed an uptick in the same smishing messages.
Some of the cities that are most targeted by the scams include:
- Dallas, Texas
- Atlanta, GA
- Los Angeles, Californian
- Chicago, Illinois
- Orlando, Florida
- Florida, Miami
- San Antone, Texas
- Las Vegas, Nevada
- Houston, Texas
- Denver, Colorado
- San Diego, California
- Phoenix, Arizona
- Seattle, Washington
- Indianapolis, Indiana
- Boardman, Ohio
These states have witnessed a sudden rise in payment scamming on the tolled freeways, the scambing activity increasing almost two-fold in the past few weeks, it has been reported.
A New Skill: Refusal Payment Refusals
The most misleading part of the scam lies in the failed payment attempt messages. The scammed victims who attempt to input their payment information are presented with a failed payment attempt, which causes them to retry their credentials several times. This ensures that the scammers gather more credit card and bank information, where the chances of financial exploitation are higher.
How to Protect Yourself
The federal and state agencies are asking victims to act quickly when they got suspicious text messages. The FBI suggests reporting a complaint to the Internet Crime Complaint Center (IC3) and reporting the original number and the spoof website. Those who have already clicked on the phony links are requested to lock the account, closely watch bank statements for unauthorized payments, and dispute suspicious charges that they do not recognize. The users are also requested to use their phone’s built-in spam-reporting feature or forward the scam messages to 7726 (SPAM) in an effort to assist the authorities in tracing and shutting down the scammer’s operations.
The Growing Threat of Mobile Cybercrime
The cyber attacks based on smartphones indicate the growing vulnerability of smartphone users. As per experts, individuals are bound to be a victim of such scams on the smartphone since the screens are tiny and it becomes harder to detect suspicious links. The remedy to stay protected from such scams is to warn oneself never to click on unsolicited links, cross-check messages from official sites, and report the suspicious incident immediately if discovered.
Be Cautious and Delete Suspect Message Since the hackers change their techniques all the time, awareness and caution are the most powerful weapons against internet scams. The FBI has one simple advice: when you see a suspicious email, close it right away.
