A new smartphone scam has been identified by Google, which allows cybercriminals to bypass mobile networks and send malicious texts directly to users’ phones. This exploit, known as SMS blasters, uses a technique called “cell-site simulators” to trick phones into connecting with an attacker’s radio device.
The attack works by sending texts that appear identical to those sent through normal networks, but the difference lies in how they are delivered. The attackers can target specific locations and prioritize areas with richer pickings, making it a significant threat to users’ personal and financial information.
Google warns that this method bypasses carrier network-based anti-spam and anti-fraud filters, leaving users vulnerable to attacks. In response, Google is urging smartphone users to disable 2G networks on their devices, which are still supported by many manufacturers but are woefully insecure compared to newer networks like 5G, 4G (LTE), and 3G.
Disabling 2G can be done through the phone’s settings, although it may not be available on all devices. Android users can search for “2G” or “cellular settings” to check if the option is available. Google and Samsung are also upgrading their devices to prevent Android phones from connecting to these less secure networks.
The police are advising smartphone users to disable 2G, as it can still connect to fake cell access points even in areas where 2G has been sunsetted. This is a device-level problem that requires users to take action.
In contrast to Androids, iPhones cannot currently disable 2G unless Apple’s Lockdown Mode is enabled. However, iPhone users can filter texts from unknown numbers and treat them with suspicion. Regardless of the source, it’s essential for all smartphone users to exercise caution when receiving suspicious texts and avoid clicking on links that may lead to further attacks.
Source: Forbes