What is Smishing?

Smishing is a variant of a phishing attack which involves the use of misleading SMS or text messages to misdirect a target into sharing sensitive information or access. The text messages involved in a smishing attack often contain malicious links or a fraudulent customer support or authoritative phone intended for the target to click on or call. If a target responds to this call to action (CTA), it will typically go on to trigger some form of compromising activity, resulting in the divulging of sensitive information such as one's Social Security Number or credit card details, or losing access to one's devices.