Another new stupid problem means another stupid word to learn
Yes, the miscreants have another method to annoy us and drive us crazy.
It is like phishing, you know, like those emails we just delete as soon
as a we see them. Yet, with the fact that everyone has a
cell phone, and since those numbers are not really private, spammers
have taken to using text messaging to spread their anxiety inducing
CRAP!
Of course, someone in the digerati — whose sole job it is to mangle the
English language — came up with a witty, I suppose, but indeed pithy, term
for this new social malaise. The term is SMISHING. NO I am not drunk.
The technical term for text messaging is "short
message service or SMS." To send a smish [ed. I just made that term up.], an attacker
doesn't even need to know the actual phone number of the intended
recipient. An attacker could automatically dial any 7, 10, or 11 random numbers.
Studies show that "users
read 98% of text messages and respond to 45%." This makes
text very logical for hackers to use as an attack vector. The same study
showed only 6% of emails receive responses. So smishing is
probably good business.
Security professionals have denoted what clues exist that show
that a text is a smish. They are, of
course, quite obvious.
Smishing texts share some common
characteristics with phishing emails. For example, a smishing message
will normally:
✓ Convey a sense of urgency
✓ Contain a link
✓ Contain a request for personal information.
Another clue that a text message might be malicious is the sender’s
phone number. Large organizations, like banks and retailers, will
generally send text messages from short-code numbers. Smishing texts
often come from “regular” 11-digit mobile numbers. Smishing messages
might also be poorly-written or contain typos. However, don’t rely on
these sorts of mistakes—typos in smishing messages are increasingly
uncommon as fraudsters become more sophisticated.
So, on top of this load of bull, we have "vishing,"
which is not Swedish for wishing. We take the V from the word,
VOICE. We add the ever present "ish." And we get voice phishing or
"vishing." It has been noted that a vishing scam often begins with
"with an automated message, telling the recipient that they are
the victim of identity fraud. The message requests that the recipient
call a specific number. When doing so, they are asked to disclose
personal information. Hackers then may use the information themselves to
gain access to other accounts or sell the information on the Dark Web."
Now, I know you all already know all this. But you may not have
known that the digerati named these nuisances, annoyances, and pretty darn
limp attacks. So now you can sound hip and cool just like the kiddies
when discussing how much you have come to hate that
smartphone and all its stupid accruements.
And I got a reason to use my really cool Wizard of Oz parody graphic.
There's always a method to the madness.
Gerald Reiff |