T-Mobile has issued a warning about unblockable SMS phishing attacks – BollyInside

T-Mobile has issued a warning to its customers about an unblockable smishing campaign that seeks to steal personal information and passwords, as well as install malware.
T-Mobile issued the warning after the New Jersey Cybersecurity / Communications Integration Cell (NJCCIC), a division of the Office of Homeland Security and Preparedness that focuses on cybersecurity threat analysis and incident reporting, notified the firm.
“Multiple” customers contacted the NJCCIC after receiving group SMS messages purporting to be from T-Mobile. The letter praised the recipient for paying their bills on time and offered a free “present,” which could be claimed by clicking on the linked web link.
The group message was sent to numerous numbers, at random, the NJCCIC says, with the victims being targeted “dozens of times” over the span of three days. Given that these are group texts, the victims were unable to block the attacker.
BleepingComputer reminds that, in the past four years, T-Mobile has disclosed a total of seven data breaches.
The NJCCIC speculates that the smishing campaign was likely made possible due to previous data breaches affecting the mobile carrier and millions of its users.
In 2018, data belonging to 3% of the company’s customers was accessed. And a year later, T-Mobile exposed the data belonging to some of its pre-paid customers.
In 2020, meanwhile, T-Mobile employees’ email accounts were compromised, and phone numbers and call records were accessed by unauthorized third parties.
Last year wasn’t devoid of incident, either, with a threat actor compromising T-Mobile’s network through its testing environment, and using the stolen information to launch SIM swap attacks.
News Summary:

source

Share:

More Posts

Market Research

Pulse Surveys

Turn feedback into action

Our survey platform makes it easy to measure and understand feedback so you can drive growth and innovation

Pulse Handshak

Pulse Handshak

Collaborative online survey tool for the market research industry. Remote assisted surveying just like face-to-face interviews. Here interviewers can talk to the respondent over the web-console without the need for any other communication channel and share the same Q're with responses and click actions.

Pulse FE

Pulse FE

Pulse Field Expert or Pulse FE is the main platform for both offline and online survey at softofficepro.com. It is robust and used by hundreds of clients over tens of years with millions of responses. Do it once Q're and deploy on both offline devices (android) and online forms makes it a great cost effective platform for any kind of responses

Pulse Ultimate

Pulse Ultimate

Pulse Ultimate is targeted for tracking studies and retail audits. An offline survey system offering extreme field control including processes like data quality check, back-check, rework, comparison with previous wave data etc. helps to get the best results on a day-to-day basis

Pulse LS

Pulse LS

Use a managed Limesurvey and our expertise for creating complex forms and token based user management. Use optional mailing system to send survey invitation to each participant and track progress of the response status. Industry standard SPSS / R output supported