About Us | Contact Us
View Cart

Don’t Get Smished!

By Vigilize | Thursday, July 5, 2012 - Leave a Comment
Gone Smishing

Mobile Devices Security Awareness (and User Awareness) can prevent successful smishing attacks!

We have all heard about phishing, or at least I hope so. But, how many have heard about smishing? Smishing is another form of social engineering attack that uses SMS (text messaging) and mobile devices instead of the telephone (voice) to glean nonpublic information from unsuspecting individuals.

“Smishing:” A New Threat To Mobile Phone Users

A smishing message usually contains something that looks like it came from a financial institution or a message stating that the person will be charged a certain fee if action is not taken immediately. The individual is then required to click on a link or call a phone number that is conveniently provided to in the message. From there, the victim is required to provide certain information (e.g. account numbers, login credentials, Social Security number, etc.).

Here are some guidelines to protect against smishing:

  • Smishing is another form of social engineering – using text messages to get your private and confidential information!
  • Always follow company policy regarding securing your mobile device. *
  • Don’t reply to unsolicited text messages.
  • Don’t “click” on links or open attachments that you are not expecting.
  • Verify the authentication of a text message or its sender.
  • Don’t enter sensitive information in a text message – keep your information private.
  • Don’t call phone numbers as directed in text message. That’s a way for smishing to turn into phishing!
  • When in doubt, don’t! Call your Information Security Officer or Network Administrator.

To help you remind your employees about smishing and ways to protect themselves, here’s a security awareness reminder poster that you may print and either hand out to your employees or post it in conspicuous locations:    Gone Smishing


*For policies about mobile security, visit BYOD – Mobile Devices Security – Bring Your Own Device Policy.

Latest News
    Implementing Protective DNS could help your organization avoid attack… An article review. Noting the risks still associated with the Domain Name System (DNS), the National Security Agency and the Cybersecurity and Infrastructure Security Agency (CISA) have recently released new guidance on the selection and use of a Protective DNS service (PDNS). The guidance, released in […]
    A Webinar-Movie In 2018 the NCUA started reviewing credit unions with $1 billion or more in assets using a tool known as the Automated Cybersecurity Examination Tool, or ACET. The expansion to smaller credit unions is inevitable. In the new year, credit unions should now think about how they can come into compliance with the […]
    What are the top seven risks your board should know about in 2021? Since his first board presentation in 2000, when Dan presents audit reports to boards of directors, he also talks to the board about the top risks the institution is facing. Since 2006, Dan has been compiling a list of the “top seven […]
    It’s time for another workshop for the technical side of the community-bank. The infotex Team brings you all new topics for 2021! Topics that are jam packed with all the techno-babble that is often lost on management, but is music to the Bank IT Geek’s ears. Time for a workshop where we can turn off the […]
     A Timeline Update as of 02/22/21 An update to our Newest Employee’s FIRST Technical Article Another interim post-mortem review . . . . A Note About Updates: We have decided to leave the original article as it was originally posted and to update this post with any changes that have been made. You can see […]
    Another awareness poster for YOUR customers (and users).  Now that we have our own employees aware, maybe it’s time to start posting content for our customers! Download the large versions here: Awareness Poster (Portrait) Awareness Poster (Landscape)   You are welcome to print out and distribute this around your office.  
    A Webinar-Movie The 2020 annual webinar update on the subject will include a review of the previous years’ movies that are already available, and a discussion about alternative tactics that have arisen from recent virtual conferences and regulator panels.
    The cybersecurity industry faces challenges, and some of them may involve your business… An article review. In a world where threats to your organization’s electronic assets are constantly emerging and evolving a cybersecurity insurance policy can help mitigate risk…but what kind of risk does the cybersecurity insurance industry face?  A new article in the Harvard […]
    A Timeline as of 01/24/2021 Our Newest Employee’s FIRST Technical Article Another interim post-mortem review . . . . A Note About Updates: We are leaving this article as is, but for any updates to the timeline, check the Autopsy of the SolarWinds Hack Timeline Update article!      – Vigilize Introduction: As the managing […]
    PRESS RELEASE – FOR IMMEDIATE RELEASE BUSINESS NEWS FORUM AND CONFERENCE NEWS infotex is proud to announce that Dan Hadaway will be moderating a series of IT Forums for the Ohio Bankers League. “We are excited to continue fostering the relationship with the OBL to help educate and keep Risk Management at the forefront of […]