The Old is New Again: An Intro to SMS Security and Why It’s Vital
summary
SMS phishing is rising and A2P SMS remains widely used for authentication and notifications, so attackers use cheap, scalable methods like €750 for 50,000 SMS via legal routes and yield ~10% click rates from ~98% open rate within minutes. Fraud techniques include SIM farms, SIM swapping, flash‑call bypasses and deepfake voice follow‑ups; examples include Bank of Ireland fines (~€1.7M) and platform losses (Twitter ~$221M) from artificial traffic inflation. Defenses: SMS firewalls, traffic profiling, GSMA IR‑70/71 guidance and security measures that can pay back in 2–3 months.
AI-written summary · about
chapters (7)
- 0:00Start
- 7:02Can you identify a phishing attack?
- 20:45Business impacts of artificially generated traffic
- 25:25Impacts for Mobile Operators
- 27:41SMS Security: MNO and Enterprise Strategies
- 29:16Remember, consumer trust is the true goal
- 29:56Calling out all users!
related talks
30mAuthentication Strategies to Protect Your Customers and Your Brand from Sophisticated Attacks
48m2FA2Furious: New Threats to MFA
29mGuardians of the Gateway: Battling SMS Fraud in Real Time
29mProtecting Phone Verification
28mUnderstanding IRSF Fraud: Protecting Against...
37mYour Phone is Not Your Phone: A Dive Into SMS PVA Fraud
01h 02mWhy using SMS in the authentication chain is risky
33mSMS PVA Services Fueled by Compromised Supply-Chain Mobile Botnets