SMISHING: Definition and issues
THE Smishing (Contraction of “SMS” and “phishing”) designates a cyberfraude technique using text messages to deceive the victims. The attackers send SMS imitating those of legitimate organizations (banks, operators, public services) in order to encourage recipients to click on a link or to communicate sensitive data such as their identifiers, bank details or passwords.
Why is SMISHING crucial?
- Direct targeting : He operates a personal and immediate channel, often perceived as safe.
- Exceptional opening rate : more than 90 % of SMS are read in less than 3 minutes.
- Massive fraud vector : it facilitates the theft of banking information or identity theft.
- Psychological manipulation : He plays on urgency, fear or curiosity to push for action.
Technological issues
- Authentication of shipments : the fight against spoofing numbers remain complex.
- Automated detection : Cybersecurity operators and solutions develop AI filtering algorithms to locate fraudulent SMS.
- Fragmented mobile ecosystems : the diversity of operating systems and operators complicates the implementation of universal protections.
- Protection of Byod devices (BRING Your OWN Device): In professional environments, a single click on an SMS can compromise a business network.
Smishing vs phishing: what difference?
| Criteria | Phishing | Smishing |
|---|---|---|
| Attack channel | Online email or messaging | SMS or mobile couriers |
| Main target | Computers | Smartphones users |
| Dominant tactic | Fraudulent links or attachments | Short links (shortened URL) or Immediate Action Calls |
| Opening rate | About 20 % | Greater than 90 % |
The future of Smishing
The rise of mobile bankingtransactional notifications and messaging applications (WhatsApp, RCS, Signal) creates new attack areas. Smishing campaigns become more sophisticated thanks to generative AI, capable of personalizing messages and perfectly imitating the communication styles of legitimate institutions.
States strengthen regulation: in France, the system 33,700 And the compulsory identification of commercial SMS sender constitute the first safeguards, but user vigilance remains the best rampart.
