09:51 AM
Connect Directly

SMS Spam Delivers More Malware, Scams

Threats are now often disguised as gift offers, product giveaways, and payment protection insurance.

Every lesson we should have learned from our experiences with spam and fraudulent email is quickly being replicated in SMS messaging, according to a threat report produced by the GMSA in conjunction with messaging security provider Cloudmark.

According to the report, there were 350,000 attack variants and more than 50,000 unique attacks in December 2012 alone, demonstrating the rapid increase in attacks, Cloudmark CTO Neil Cook said. He added that the industry is now seeing a 300% year-over-year growth.

Most of these threats are in the form of bulk marketing, especially in places like India and China, whereas in North America and Europe the attacks are more insidious, resulting in the loss of personal data. These attacks take the form of gift offers, iPad giveaways, and payment protection insurance (PPI) in the U.K.

Cook said that there was even an Android botnet attack, known as the SpamSoldier botnet. For more, watch the video embedded below. run-of-site player, used to publish article embedded videos via DCT. The same ads will be served on this player regardless of embed location.

Attend Interop Las Vegas, May 6-10, and attend the most thorough training on Apple Deployment at the NEW Mac & iOS IT Conference. Use Priority Code DIPR02 by March 2 to save up to $500 off the price of Conference Passes. Join us in Las Vegas for access to 125+ workshops and conference classes, 350+ exhibiting companies, and the latest technology. Register for Interop today!

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Current Issue
Dark Reading Tech Digest September 7, 2015
Some security flaws go beyond simple app vulnerabilities. Have you checked for these?
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
Published: 2015-10-08
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

Published: 2015-10-08
Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 mishandles authentication requests, which allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended login restrictions or obtain sensitive information, by leveraging certain group-administration privile...

Published: 2015-10-08
The REST interface in Cisco Unified Communications Manager IM and Presence Service 11.5(1) allows remote attackers to cause a denial of service (SIP proxy service restart) via a crafted HTTP request, aka Bug ID CSCuw31632.

Published: 2015-10-08
Cisco Wireless LAN Controller (WLC) devices with software 7.0(240.0), 7.3(101.0), and 7.4(1.19) allow remote attackers to cause a denial of service (device outage) by sending malformed 802.11i management data to a managed access point, aka Bug ID CSCub65236.

Published: 2015-10-06
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 21335999.

Dark Reading Radio
Archived Dark Reading Radio
What can the information security industry do to solve the IoT security problem? Learn more and join the conversation on the next episode of Dark Reading Radio.