#smishing — Public Fediverse posts

Don’t Troll the Scam Texts. You’re Only Helping the Scammers.
https://www.msn.com/en-us/money/general/don-t-troll-the-scam-texts-you-re-only-helping-the-scammers/ar-AA24i1NW #cybersecurity #scams #scambaiters #smishing #ignore #block #report

Supuestos “mensajes urgentes” disparan casos de fraudes digitales, alerta UNED

La casa de enseñanza señala que las estafas a través de smishing se han convertido en “una de las principales amenazas digitales” en 2026.
La entrada Supuestos “mensajes urgentes” disparan casos de fraudes digitales, alerta UNED aparece primero en Semanario Universidad.

#Ciberfraudes #Estafas #Fraudes #País #RolandoRojas #Smishing #Tecnología #Uned #UniversidadEstatalADistancia #ÚltimaHora

https://semanariouniversidad.com/pais/supuestos-mensajes-urgentes-disparan-casos-de-fraudes-digitales-alerta-uned/

📱Smishing Slows, Quishing Quickens 🎣

Sick of smishing and those pesky parking/toll texts? Don’t get caught by crafty, counterfeit court QR codes — it’s a scan-and-scam! 💳 🚨

North American cell phone users are being hit with yet another wave of smishing campaigns that now include quishing elements. Likely orchestrated by Chinese-speaking threat actors, this latest campaign builds on previous vehicular violations, evolving tactics while impersonating US courts. 🧑‍⚖️

We’ve recently seen a flurry of SMS messages pushing parking violations — but with a twist: face justice in court… or scan and pay instead!

Delivered as an official-looking image, the actor has begun integrating QR codes into these lures to help mask suspicious phishing URLs, baiting victims into entering personal information, credentials, and ultimately making payments.

For some, this lure may sound better than facing justice for their perceived poor parking. Victims who don't comply are warned that failure to appear or pay could have serious repercussions - a scare tactic designed to push you toward a hasty decision and scanning the QR code! 🫣

We uncovered thousands of these nefarious domains, through their use of Registered Domain Generation Algorithms (RDGAs) and local government impersonation, hosted across a diverse range of hosting providers to evade takedown.

Recent examples:
⛔ ahfgx[.]icu
⛔ euoyq[.]icu
⛔ htpze[.]icu
⛔ mwlaj[.]icu

Friendly reminder - courts don't usually communicate with you via text. That said, we suspect this actor will continue to evolve, expanding their global reach and diversifying lures while improving tradecraft used in smishing and quishing delivery. As for us, we'll take our chances on evading that bench warrant and running from the law. 🏃‍♂️‍➡️

#dns #threatintel #threatintelligence #cybercrime #cybersecurity #infosec #infoblox #infobloxthreatintel #phishing #smishing #quishing

Next week, I'm speaking at #Saintcon about #phishing, #smishing, #quishing (all the -ishings) and propose a broad-based possible solution that could end this problem forever. Nothing big.

If you're going to be there, you can find me in Track 2 at 2:30pm, or most of the rest of the time at the @SAINTCON @malwarevillage Community, where we will be hosting two of our contests (MARC I and BOMBE) and encouraging people to consider the field of malware analysis and threat research as a career.

We also will have minibadges, both at #MalwareVillage and at the #Netcraft booth. If you're a #minibadge fan/collector, you aren't going to want to miss out on the Netcraft minibadge, which is awesome. Just drop by the booth to get a kit to build one. Tell them Spike sent ya.

Until then, stay safe, and please tell everyone you know, don't click links to tax refunds or toll road fees you get on your phone.

/END

https://www.netcraft.com/blog/taxpayers-drivers-targeted-in-refund-and-road-toll-smishing-scams

In de zoektocht naar de daders van een helpdeskfraude in Den Bommel en Willemstad, werd een man opgelicht door valse bankmedewerkers die hem overtuigden geld en waardevolle spullen af te geven.

Artikel Cybercrimeinfo: https://www.ccinfo.nl/menu-nieuws-trends/opsporing/gezochte-personen-cybercrime/2566503_den-bommel-en-willemstad-helpdesk-fraude

Podcast Spotify: https://open.spotify.com/episode/3q08Rvc4FD2NwCa7kKc0Gm?si=1831de38fcb54561

Podcast Youtube: https://youtu.be/K7TzDKlW4Qk

#DenBommel #Willemstad #HelpdeskFraude #Cybercrime #Opsporing #Vishing #Smishing

Chinese Innovations Spawn Wave of Toll Phishing Via SMS

https://krebsonsecurity.com/2025/01/chinese-innovations-spawn-wave-of-toll-phishing-via-sms/

#NorthTexasTollAuthority #CSISSecurityGroup #ALittleSunshine #LatestWarnings #TheTollRoads #WebFraud2.0 #FordMerrill #SecAlliance #SMSphishing #Lighthouse #EZDriveMA #@chenlun #iMessage #smishing #MassDOT #Sunpass #fbi #ic3 #RCS

Chinese Innovations Spawn Wave of Toll Phishing Via SMS https://krebsonsecurity.com/2025/01/chinese-innovations-spawn-wave-of-toll-phishing-via-sms/ #NorthTexasTollAuthority #CSISSecurityGroup #ALittleSunshine #LatestWarnings #TheTollRoads #WebFraud2.0 #FordMerrill #SecAlliance #SMSphishing #Lighthouse #EZDriveMA #@chenlun #iMessage #smishing #MassDOT #Sunpass #fbi #ic3 #RCS

📹 DomainTools Solution Engineer Steven Behm shares how to use DomainTools passive DNS database, DNSDB, to find domains with patterns in their naming schemes.

He begins by using DomainTools Iris Investigate to spot patterns at the apex level, domain level in the pivot engine, as well as the subdomain level in the pDNS panel.

He then moves over to DomainTools Farsight DNSDB to query our passive DNS database, specifically using a regular expression (regex) query. This is technically a flexible search in DNSDB Scout, and he makes it as specific as possible to find more information.

This helps security organizations stay ahead of emerging threats and reduce exposure to risk in an efficient, quick way.

https://www.youtube.com/watch?v=R2Qsw4L5js0&ab_channel=DomainTools

#proactivesecurity #cybersecurity #smishing #phishing

So.. twice this year a DNS threat actor changed behavior when we were investigating and they soared from suspicious to malicious. lol. clever. first #decoydog then #prolificpuma ... anyhow.. kinda funny.. we fully expected them to regroup... it's their job after all to do the crime thing.. but they just can't let go of music references.. new email address 6lackrules@proton[.]me. no more anon usTLD registrations it looks like.

Here's some domains. a slight change in hosting. i don't see the shorteners set up yet but for these'll be for sms bad activities again i'm sure.

zk0[.]us,zg5[.]us,yl4[.]us,yg2[.]us,y4f[.]us,xa4[.]us,x8i[.]us,wu7[.]us,wn3[.]us,w1m[.]us,v9e[.]us,v3y[.]us,uv5[.]us,uj2[.]us,ud4[.]us,u7n[.]us,u2f[.]us,tr0[.]us,tl1[.]us,t7x[.]us,s9k[.]us,qb9[.]us,q8r[.]us,q6d[.]us,q3u[.]us,q2u[.]us,pj8[.]us,p6s[.]us,p6h[.]us,o8r[.]us,o8l[.]us,o1i[.]us,lh8[.]us,ks0[.]us,kf8[.]us,k7x[.]us,k3o[.]us,jx4[.]us,jf4[.]us,hz0[.]us,h7s[.]us,h6l[.]us,g9s[.]us,g9j[.]us,fy3[.]us,f5y[.]us,f3z[.]us,er7[.]us,ecyz[.]us,e9c[.]us,d8c[.]us,c9i[.]us,c9a[.]us,bk7[.]us,a8m[.]us,a8j[.]us,a6r[.]us,9yl[.]us,9xl[.]us,9ou[.]us,9ma[.]us,9jy[.]us,9iq[.]us,8qe[.]us,8mv[.]us,8im[.]us,8fv[.]us,7ov[.]us,7nv[.]us,7cb[.]us,6np[.]us,6bu[.]us,5jc[.]us,5ja[.]us,3kc[.]us,2jk[.]us,2cl[.]us,0ho[.]us,piyt[.]us,zlyx[.]us,wyop[.]us,wk0[.]us,k0z[.]us,8ec[.]us,7ol[.]us,kaqu[.]us,jdhr[.]us,ivdo[.]us,w6r[.]us,t6s[.]us,sg4[.]us,j8q[.]us,f1d[.]us,aehv[.]us,utpy[.]us,jqcu[.]us,kxjm[.]us

#dns #malware #smishing #phishing #cybersecurity #infosec #infoblox

Krebs on Security: SMS Phishers Harvested Phone Numbers, Shipment Data from UPS Tracking Tool https://krebsonsecurity.com/2023/06/sms-phishers-harvested-phone-numbers-shipment-data-from-ups-tracking-tool/ #UnitedParcelService #ALittleSunshine #LatestWarnings #UPSCanadaLtd. #WebFraud2.0 #BrianHughes #SMSphishing #smishing #Adidas #apple #Lego #ups

SMS Phishers Harvested Phone Numbers, Shipment Data from UPS Tracking Tool

https://krebsonsecurity.com/2023/06/sms-phishers-harvested-phone-numbers-shipment-data-from-ups-tracking-tool/

#UnitedParcelService #ALittleSunshine #LatestWarnings #UPSCanadaLtd. #WebFraud2.0 #BrianHughes #SMSphishing #smishing #Adidas #apple #Lego #ups

SMS Phishers Harvested Phone Numbers, Shipment Data from UPS Tracking Tool https://krebsonsecurity.com/2023/06/sms-phishers-harvested-phone-numbers-shipment-data-from-ups-tracking-tool/ #UnitedParcelService #ALittleSunshine #LatestWarnings #UPSCanadaLtd. #WebFraud2.0 #BrianHughes #SMSphishing #smishing #Adidas #apple #Lego #ups

U.K. Arrest in ‘SMS Bandits’ Phishing Service https://krebsonsecurity.com/2021/02/u-k-arrest-in-sms-bandits-phishing-service/ #NationalCrimeAgency #Ne'er-Do-WellNews #ScyllaIntel #SMSphishing #proofpoint #SashaAngus #SMSBandits #otpagency #smishing