One of the most common ways cyber attackers attempt to trick or fool people is by scamming you in email attacks (often called phishing) or try to trick you with phone calls. However, as technology continues to advance bad guys are always trying new methods, to include tricking you with messaging technologies such as text messaging, iMessage/Facetime, WhatsApp, Slack or Skype. Here are some simple steps to protect yourself and spot/stop these common attacks.
What are messaging attacks? Messaging attacks (sometimes called Smishing, a play on the word Phishing) are when cyber attackers use SMS, texting or messaging technologies to reach out to you and try to trick you into taking an action you should not take. Perhaps they want to fool you into clicking on a malicious link, or get you to call a phone number so they can get your banking information.
Just like in traditional phishing email attacks, bad guys often play on your emotions to act. However, what makes messaging attacks so dangerous is that they often feel far more informal or personal than email, making it more likely you may fall victim.
In addition, with messaging attacks there is less information and fewer clues for you to pick up on that something is wrong or suspicious. When you receive a message that seems odd or suspicious, start by asking yourself does this message make sense, why am I receiving it? Here are some of the most common clues of an attack:
A tremendous sense of urgency, when someone is attempting to rush you into taking an action.
Is this message asking for personal information, passwords or other sensitive information they should not have access to?
Does the message sound too good to be true? No, you did not win the lottery, especially one you never entered.
A message that appears to come from a co-worker or friend’s account or phone number, but the wording does not sound like them. Their account may have been compromised and taken over by an attacker, or the attacker is pretending to be them, tricking you into taking action.
If you get a message that makes you have a strong reaction, wait a moment and give yourself a chance to calm yourself and think it through before you respond. For example, if you get a text message from your bank saying there is a problem with your bank account or credit card, contact your bank or credit card company directly by phone. Bear in mind that most government agencies, such as tax or law enforcement agencies, won’t contact you via text message.
When it comes to messaging attacks, you are your own best defense.