Beware of SMS Phishing on Cell Phones

Add SMiShing to your list of concerns when it comes to identity theft phishing schemes.

SMiShing, a term coined by researchers for the McAfee security software firm, describes a form of phishing in which the bad guys send an SMS (short message service) message to a person’s mobile phone. The first such messages purported to come from dating-service Web sites. Victims would receive a message announcing that the site intended to charge them $2 a day unless they visited the URL listed in the message and followed the steps outlined there to unsubscribe from the service. Upon browsing to the URL (via computer), victims would get hit with drive-by downloads that installed Trojan horse software that subsequently would steal passwords and do other nasty things to the victims’ PC.

Most people don’t expect scams via text message, so these new cell phone phishing schemes are likely having some success. The rule remains the same as it is with email… companies can’t arbitrarily charge you for things without your express consent. So if you didn’t sign up for a service, assume these types of messages are scams aimed at hitting you with nasty Trojan horses, worms and viruses.

Via PC World.