https://www.bejarano.io/sms-phishing/ https://www.bejarano.io/sms-phishing/ HN discussion (8 days ago): https://news.ycombinator.com/item?id=31862994 https://n

https://www.bejarano.io/sms-phishing/ https://www.bejarano.io/sms-phishing/ HN discussion (8 days ago): https://news.ycombinator.com/item?id=31862994 https://news.ycombinator.com/item?id=31862994 I think a lot of people on this thread are forgetting just how easy it is to spoof SMS. - SMS has a field called sender ID, which is set by the sender, requires no identity verification, and can be any arbitrary short string. - This allows anyone to send messages to any number, identifying themselves as whoever they want to impersonate. - And since there’s no sender phone number in the message, your phone can’t tell real and fake messages apart. - And so it groups them into the same conversation