SMS phishing attack (smishing)

[sokani]

Actually, I've been getting this SMS from an unknown sender for some time now. I delete it as it comes and the sender hasn't given up, he/she is bent on gaining control of my device.




This is what the message looks like in my inbox.





When I opened it, it's just a blank message with an attachment asking me to "tap to download".


I think the attacker knows me and he/she has been relentlessly sending me this malware hoping that I would download it. Please whenever you received messages like this delete it immediately and never try to download the attachment because it's one of the ways hackers get access to your devices and steal your sensitive information such as pins, backup phrase, card details etc.

I've blocked the number and I'm hoping it would stop.

[Maus0728]

Knowing this, you should also be able to turn off any related settings that automatically download media files when you are connected on the internet whether it is on WiFi or mobile data. Because sometimes there are instances where media files being sent is downloaded automatically without  you knowing it.

As for the settings, it depends on what SMS application you are using, so you might need a bit of exploration. Personally, I am using Signal as my default messaging app and was able to turn off "Media auto download".

And yeah, good job on not clicking random shits.

[un_rank]

It is doubtful that the attacker knows you personally. Hackers usually operate by sending this random message to multiple individuals at the same time in the hopes that a couple of them would make the mistake of downloading.

Sending this non-specific message only to people they (the hackers) know would yield little to no result.

Be careful with how you handle personal information like email, phone no, social handles and so on.

- Jay -

[Sarah Azhari]

I think the attacker knows me and he/she has been relentlessly sending me this malware hoping that I would download it.

therefore, we must not show everyone if related to crypto or any financial which brings a hacker to try to cheat you. let's be humble and not arrogant if you have a lot of cryptos. I always dodge and do not use symbols or emblems of bitcoin on t-shirts, hats or laptop stickers because it makes you be the hacker target, they will search your email, and phone number to insert hijacker.

[acroman08]

I've blocked the number and I'm hoping it would stop.

if getting a new number is easy in your country(just like how it is so easy to change phone numbers in my country in the past), I won't be surprised if they use another number to send this SMS phishing attempt on your phone again. I've had my fair share of these kinds of scammers(not crypto related phishing attempts) and they are persistent.

[sokani]

Knowing this, you should also be able to turn off any related settings that automatically download media files when you are connected on the internet whether it is on WiFi or mobile data. Because sometimes there are instances where media files being sent is downloaded automatically without  you knowing it.

That's true... I enabled such feature on my settings that does not support auto download of applications over wifi or data on playstore, will check if similar feature is available for messages.

It is doubtful that the attacker knows you personally. Hackers usually operate by sending this random message to multiple individuals at the same time in the hopes that a couple of them would make the mistake of downloading.

Well why I said that is because I expected the hacker to give up on his quest since I wasn't taking the bait but the messages just kept coming, it just goes to show how patient and relentless this guys can be.

therefore, we must not show everyone if related to crypto or any financial which brings a hacker to try to cheat you. let's be humble and not arrogant if you have a lot of cryptos. I always dodge and do not use symbols or emblems of bitcoin on t-shirts, hats or laptop stickers because it makes you be the hacker target, they will search your email, and phone number to insert hijacker.

Thanks for the advice mate. I'm not a crypto millionaire or billionaire... Atleast not yet, hahaha and I try to be discreet as much as possible with my crypto activities.
 

[Pmalek]

I think the attacker knows me and he/she has been relentlessly sending me this malware hoping that I would download it.

I don't think so. It's more likely there was a data breach of some site or service that you use and whoever did it or whoever bought the database is now trying to exploit it. Be careful where you sign up with your personal information such as you real phone number. Ii isn't a bad idea to have a secondary phone number to use for that sort of thing and keep your main one for work, family, friends...

Your interest in crypto is a private manner, so don't make it public in a way that it might attract attention with the wrong people. Trust only a handful of close friends and family that you are into crypto. There is no reason for your entire ZIP code to know who you are and what you are doing.

[Cantsay]

I've blocked the number and I'm hoping it would stop.

You said unknown number right? So how do you block an unknown number? Because from what I know you can't call or message an unknown number you can't even see the details of the number. Or am I missing it for private number? I have seen so many people talking about this but still yet I haven't experienced it and I'm also hoping I don't get to experience it.

Op, there's is still a probability that you're still going to get more messages from them even after block them (as you said) since they already have your number they can also send you more messages with another but the probability is quite small. But for now just be on your toe don't allow anyone use your phone for anything so that they don't accidentally download the file.

[Accardo]

I've blocked the number and I'm hoping it would stop.

You said unknown number right? So how do you block an unknown number? Because from what I know you can't call or message an unknown number you can't even see the details of the number. Or am I missing it for private number? I have seen so many people talking about this but still yet I haven't experienced it and I'm also hoping I don't get to experience it.

Op, there's is still a probability that you're still going to get more messages from them even after block them (as you said) since they already have your number they can also send you more messages with another but the probability is quite small. But for now just be on your toe don't allow anyone use your phone for anything so that they don't accidentally download the file.

I think the sender has a number and his identity is unknown to the Op unlike the kind of unknown number you mean that has no identity or number, that can only happen for calls, I've not received an SMS from an unknown number without any ID. However, it's certain that Op would receive lots of these messages and the sender may not be targeting his crypto it could be some marketers using bulk SMS to market their app. But to be safe it's better not to download the file. Secondly, Op, shouldnt drop his numbers on public forums or social media where these people scrape numbers for bulk SMS.

[kamvreto]

I think the sender has a number and his identity is unknown to the Op unlike the kind of unknown number you mean that has no identity or number, that can only happen for calls, I've not received an SMS from an unknown number without any ID. However, it's certain that Op would receive lots of these messages and the sender may not be targeting his crypto it could be some marketers using bulk SMS to market their app. But to be safe it's better not to download the file. Secondly, Op, shouldnt drop his numbers on public forums or social media where these people scrape numbers for bulk SMS.

Marketers who use bulk SMS will not provide document files like the SMS that OP gets. In general, bulk SMS for marketing purposes will have the identity of the business owner sender and some attractive offers.
The SMS that OP got in my opinion is quite dangerous because there are document files that need to be downloaded. I would suggest deleting it and blocking it if you can.  It is possible that those who sent the SMS got the number randomly, but it could also be because the OP entered his personal number on a website or forum which eventually became a hacking target.

[Smartvirus]

This is definitely something am familiar with, haven't received a few myself. Am always very skeptical about it and delete almost immediately as I receive them. Multimedia messages coming as a text from an unknown source is one I've got zero interest in.

Knowing this, you should also be able to turn off any related settings that automatically download media files when you are connected on the internet whether it is on WiFi or mobile data. Because sometimes there are instances where media files being sent is downloaded automatically without  you knowing it.

As for the settings, it depends on what SMS application you are using, so you might need a bit of exploration. Personally, I am using Signal as my default messaging app and was able to turn off "Media auto download".

And yeah, good job on not clicking random shits.

Apparently, most devices are configured by default this way especially when it comes to large files. For most persons, they've not been hit already by the effects from these auto downloads because the files aren't large but, the case might be different when it comes to applications. Applications like WhatsApp is one that comes with this auto download feature and should schemes like this take this part, some users would get hurt.

Turning auto download off on all apps and your device is definitely a choice to make and avoid connecting to random WiFi network if you should at all.

[summonerrk]

Actually, I've been getting this SMS from an unknown sender for some time now. I delete it as it comes and the sender hasn't given up, he/she is bent on gaining control of my device.




This is what the message looks like in my inbox.





When I opened it, it's just a blank message with an attachment asking me to "tap to download".


I think the attacker knows me and he/she has been relentlessly sending me this malware hoping that I would download it. Please whenever you received messages like this delete it immediately and never try to download the attachment because it's one of the ways hackers get access to your devices and steal your sensitive information such as pins, backup phrase, card details etc.

I've blocked the number and I'm hoping it would stop.

Indeed, there is a feeling that an attacker is aiming to hack your device, unlike a mass mailing. I advise you to install programs that show the reputation of those who send you messages. For example, I use WhoCalls from Kaspersky Lab. I also advise you to update your Antivirus, because it is quite possible that your computer may be subjected to a hidden attack.

[sokani]

You said unknown number right? So how do you block an unknown number? Because from what I know you can't call or message an unknown number you can't even see the details of the number.

You can do it from the phone sms settings, you just need to highlight the message and block it. You can also used third party apps such as True caller to block and report spam. In my case I used both. I'm yet to receive any messages and I'm hoping it worked.

[jerry0]

So there is no message besides the tap to download message?  So you clicked it to preview it or how did you preview it?  So you have to tap twice to download it?  But is preview enough for malware?  What about downloading the file?  Or it still require you to open the file for malware to spread?

[rat03gopoh]

So you have to tap twice to download it?  

It's just once,

But is preview enough for malware?  What about downloading the file? Or it still require you to open the file for malware to spread?

Afaik, not enough. The user must previously change the access permission,
Android has limited ability to preview the contents of this kind of message. Sometimes attackers also insert backside links that take you to certain trap sites. The best advice is don't bother clicking on any links, just delete them.

[Mate2237]

That is the best option and thing the OP has to do so that it prevents downloading ads on its own. I will also recommend the OP to switched off his or her location always to avoid track down because hackers use all these means to reset their system to relocate your spot and hack your device from another location.
This information is not only to the OP alone but also to everyone. We should just be careful with our dealings online and  some kind of message we received. As the digital technology grows every day so it is the scammers improving every day. There are sometimes that some well known app ads like Truecaller,  1Xbet, Ayoda, etc would just installed in my Android phone, and once I see it I would uninstalled it. Though probably when ads came up my hand might have touched the ads unknownly.  Be caution whenever you do with the device.

[Peanutswar]

In my country they are currentlyy proposing the Sim registration which is the users must need to register those numbers they are using to prevent having this kind of suspicious text messages, as possible if you have the settings of automatically block the spam and phishing attacks with the SMS is use those features, and as possible avoid clicking not safe links good to know there is no content right there ideal to use another number for your main account and other activity to have this kind of issues again.