Phishing conducted via SMS text messages to trick victims into revealing information or clicking malicious links.
Smishing (SMS phishing) delivers phishing attacks via text messages. Smishing exploits the trust people place in text messages and the difficulty of verifying links on mobile devices. Common smishing tactics include fake delivery notifications, bank alerts, tax refund notices, and two-factor authentication requests. The limited screen space on phones makes it harder to spot suspicious URLs, and people often respond to texts more quickly than emails.
Why It Matters
The DSC Perspective:
Smishing attacks are increasing as organisations improve email security. Staff need to understand that phishing isn't limited to email—suspicious messages can arrive via text, WhatsApp, or other messaging platforms.