Response from Security Leaders to Advanced SMS Theft Campaign
Recent research conducted by Zimperium has uncovered a sophisticated campaign that is stealing SMS messages. This campaign, known as the SMS Stealer, has been identified in over 105,000 samples, indicating a widespread impact.
Key findings from the research include:
Insights from Security Experts
Jason Soroko, Senior Vice President of Product at Sectigo:
According to Soroko, the SMS Stealer operation is complex, utilizing pre-embedded phone numbers in thousands of samples, numerous C&C servers, and Telegram bots. The malware’s ability to intercept OTPs, steal credentials, and facilitate malware infiltration poses significant risks, including ransomware attacks and financial fraud. Soroko emphasizes the need for robust mobile security strategies to protect digital identities and enterprise integrity.
Stephen Kowski, Field CTO at SlashNext Email Security+:
Kowski highlights the critical vulnerability exposed by the SMS Stealer malware, which can intercept OTPs and target hundreds of global brands. He advocates for a multi-layered security approach that incorporates advanced behavioral analysis, machine learning, and real-time threat intelligence to detect and combat these sophisticated threats effectively.
Ken Dunham, Cyber Threat Director at Qualys Threat Research Unit:
Dunham notes the increasing interest of malicious actors in subverting mobile phones to access sensitive information. SMS malware poses a significant threat, especially when combined with other data sources, making victims vulnerable to attacks from sophisticated adversaries.
Darren Guccione, CEO and Co-Founder at Keeper Security:
Guccione warns of the dangers posed by the SMS Stealer threat, which can intercept OTPs and login credentials, leading to complete account takeovers and potential financial theft and fraud. He advises individuals and organizations to adopt robust security practices to mitigate these threats, including being cautious of suspicious messages and updating security systems regularly.
