Cybercriminals are constantly looking for new ways to get around traditional security tools. And unfortunately at an increasing speed, they are targeting something almost everyone carries with them all day: a smartphone.
Scams involving your smart phone use text messages and phone calls to trick people into revealing sensitive information, sending money or giving attackers access to business accounts. This isn't a new fad — it's been going on for years — but, now it is happening more frequently, and more convincingly.
For businesses, these attacks can be especially dangerous because they often rely on urgency and familiarity rather than malicious software.
Smishing is phishing conducted through SMS or text messages. You might receive a message claiming that a package cannot be delivered, a Microsoft account needs verification, a bank detected suspicious activity or your boss needs you to complete an urgent task. The message typically encourages you to click a link, provide information, or respond immediately.
Vishing, or voice phishing, happens over the phone. An attacker may impersonate a bank representative, technology provider, vendor, government agency or even someone within your organization. Their goal is usually to convince you to provide passwords, verification codes, payment information, or other confidential details.
Businesses have become better at filtering suspicious emails, so attackers are expanding into communication channels where employees may be less cautious. A text message can feel more personal and immediate than an email, while a convincing phone call can create pressure to act before thinking.
The summer months provide scammers with plenty of opportunities. Employees may be traveling, working remotely, preparing for the back-to-school season or covering responsibilities while coworkers are on vacation. Attackers can use messages involving travel confirmations, package deliveries, account alerts, schedule changes or urgent requests to make their scams seem believable.
Here are a few reminders of things you can do to keep yourself, your employees, your business and its data protected:
It is also important to have strong security controls in place, including multi-factor authentication, security awareness training, endpoint protection and clearly defined procedures for financial or account-related requests.
As your Managed Service Provider, we help protect more than just your computers and email. Cybersecurity requires protecting your people, devices, accounts and communication channels. Staying aware of smishing and vishing scams can help prevent one convincing text or phone call from becoming a much larger security incident.
Reach out to use for a free consultation about our managed services and cybersecurity offerings — click here to schedule!