https://www.theregister.com/2024/06/10/two_arrested_in_uk_over/ # # Sign in / up The Register(r) -- Biting the hand that feeds IT # # # Topics Security Security All SecurityCyber-crimePatchesResearchCSO (X) Off-Prem Off-Prem All Off-PremEdge + IoTChannelPaaS + IaaSSaaS (X) On-Prem On-Prem All On-PremSystemsStorageNetworksHPCPersonal TechCxOPublic Sector (X) Software Software All SoftwareAI + MLApplicationsDatabasesDevOpsOSesVirtualization (X) Offbeat Offbeat All OffbeatDebatesColumnistsScienceGeek's GuideBOFHLegalBootnotesSite NewsAbout Us (X) Special Features Special Features All Special Features Cloud Infrastructure Week Cybersecurity Month Blackhat and DEF CON Sysadmin Month The Reg in Space Emerging Clean Energy Tech Week Spotlight on RSA Energy Efficient Datacenters Vendor Voice Vendor Voice Vendor Voice All Vendor Voice Amazon Web Services (AWS) New Horizon in Cloud Computing DDN Google Cloud Data Transformation Google Gemini Hewlett Packard Enterprise: Edge-to-Cloud Platform Intel vPro VMware (X) Resources Resources Whitepapers Webinars & Events Newsletters [cybercrime] Cyber-crime 18 comment bubble on white Two cuffed over suspected smishing campaign using 'text message blaster' 18 comment bubble on white Thousands of dodgy SMSes bypassed network filters in UK-first case, it is claimed icon Connor Jones Mon 10 Jun 2024 // 11:31 UTC # British police have arrested two individuals following an investigation into an SMS-based phishing campaign using some kind of homebrew hardware. That equipment, described by the cops variously as a "homemade mobile antenna," "an illegitimate telephone mast," and a "text message blaster," is thought to be a first-of-its-kind device in the UK designed to fire dodgy texts out en masse to marks, all while allegedly bypassing network operators' anti-SMS-based phishing, or smishing, defenses. Thousands of messages were sent using this setup, City of London Police claimed on Friday, with those suspected to be behind the operation misrepresenting themselves as banks "and other official organizations" in their texts. [cybercrime] "The criminals committing these types of crimes are only getting smarter, working in more complex ways to trick unknowing members of the public and steal whatever they can get their hands on. It is vital we work with partners to help prevent the public from falling victim to fraud," said temporary detective chief inspector David Vint, head of City's Dedicated Card and Payment Crime Unit (DCPCU). [cybercrime] [cybercrime] "Remember, a bank or another official authority will not ask you to share personal information over text or phone. If you think you have received a fraudulent text message, report it by forwarding it to 7726." Most network operators in the UK are enrolled in a scheme that allows customers to forward suspicious SMS messages to 7726 - a dedicated number for assessing the potential threat of any given message. Network operators can then decide whether to block or ban the sender if foul play is afoot. [cybercrime] For example, EE has stopped tens of millions of scam SMS messages since stepping up its anti-spam filter in 2021. It also runs a scheme in its retail stores whereby new customers can verify their identity with the network, vastly reducing the likelihood that messages stemming from their accounts would ever be spammy in nature. Huayong Xu, 32, of Alton Road in Croydon, was arrested on May 23 and remains the only individual identified by police in this investigation at this stage. He has been charged with possession of articles for use in fraud and will appear at Inner London Crown Court on June 26. The other individual, who wasn't identified and did not have their charges disclosed by police, was arrested on May 9 in Manchester and was bailed. [cybercrime] City of London Police said it was working with network operators, communications regulator Ofcom, and the National Cyber Security Centre (NCSC) on the case. Ofcom told us: "Criminals who defraud people using mobile technology cause huge distress and financial harm to their victims. We're working closely with the police, the National Cyber Security Centre, other regulators, and industry to tackle the problem." The Register asked NCSC for more details on the masts and if there are thought to be additional devices popping up around the UK. NCSC referred us to the City of Police for comment. * April brings tulips, taxes ... and phisherfolk scammers * Voicemail phishing emails steal Microsoft credentials * Cybercriminals are stealing iOS users' face scans to break into mobile banking accounts * Meta says risk of account theft after phone number recycling isn't its problem to solve Without any additional information to go on, it's difficult to make any kind of assumption about what these "text message blaster" devices might be. However, one possibility, judging from the messaging from the police, is that the plod are referring to an IMSI catcher aka a Stingray, which acts as a cellphone tower to communicate with people's handhelds. But those are intended primarily for surveillance. What's more likely is that the suspected UK device is perhaps some kind of SIM bank or collection of phones programmed to spam out shedloads of SMSes at a time. (r) Editor's note: This article was revised on June 11 to clarify what the alleged "illegitimate telephone mast" may be. We're digging deeper into this. Get our Tech Resources # Share More about * Cybercrime * Cybersecurity * Phishing More like these x More about * Cybercrime * Cybersecurity * Phishing * Telecommunications Narrower topics * 5G * AT&T * British Telecom * Comcast * EE * Emergency Services Network * Ericsson * Mobile Network * National Broadband Network * NCSC * NTT * Orange * RSA Conference * Telecommunications Act of 1996 * TETRA * Verizon * Vodafone * Voice over IP Broader topics * Sector * Security More about # Share 18 comment bubble on white COMMENTS More about * Cybercrime * Cybersecurity * Phishing More like these x More about * Cybercrime * Cybersecurity * Phishing * Telecommunications Narrower topics * 5G * AT&T * British Telecom * Comcast * EE * Emergency Services Network * Ericsson * Mobile Network * National Broadband Network * NCSC * NTT * Orange * RSA Conference * Telecommunications Act of 1996 * TETRA * Verizon * Vodafone * Voice over IP Broader topics * Sector * Security TIP US OFF Send us news --------------------------------------------------------------------- Other stories you might like Google guru roasts useless phishing tests, calls for fire drill-style overhaul Current approaches aren't working and demonize security teams Security23 May 2024 | 57 US senator claims UnitedHealth's CEO, board appointed 'unqualified' CISO Similar cases have resulted in serious sanctions, and they were on a far smaller scale CSO31 May 2024 | 26 Pretty much all the headaches at MSPs stem from cybersecurity More cybercrime means more problems as understaffed teams stretched to the limit Research30 May 2024 | 14 Are our IT decisions costing the planet? Issues raised in a new documentary, Clouded II, provide a template for greener thinking on IT provisioning Sponsored Feature [cybercrime] Christie's stolen data sold to highest bidder rather than leaked, RansomHub claims Experts say auctioning the auctioneer's data is unlikely to have been genuinely successful Cyber-crime4 Jun 2024 | 8 Christie's confirms RansomHub crooks stole data on 45K clients A far cry from the half-million claim that crims originally boasted Cyber-crime10 Jun 2024 | New Nork-ish cyberespionage outfit uncovered after three years Sector-agnostic group is after your data, wherever you are Cyber-crime31 May 2024 | Cylance clarifies data breach details, except where the data came from Customers, partners, operations remain uncompromised, BlackBerry says Security11 Jun 2024 | 1 UK and Canada's data chiefs join forces to investigate 23andMe mega-breach Three-pronged approach aims to uncover any malpractice at the Silicon Valley biotech biz Cyber-crime11 Jun 2024 | 11 Pure Storage pwned, claims data plundered by crims who broke into Snowflake workspace Secure storage company hasn't spilled details on how they got in Cyber-crime11 Jun 2024 | Frontier Communications: 750k people's data stolen in April attack on systems Company says just names and SSNs affected, watering down RansomHub's claims Cyber-crime7 Jun 2024 | 8 FBI encourages LockBit victims to step right up for free decryption keys The bad news? Gang wasn't deleting victim data after payments Cyber-crime6 Jun 2024 | 6 The Register icon Biting the hand that feeds IT About Us* * Contact us * Advertise with us * Who we are Our Websites* * The Next Platform * DevClass * Blocks and Files Your Privacy* * Cookies Policy * Privacy Policy * Ts & Cs * Do not sell my personal information Situation Publishing Copyright. All rights reserved (c) 1998-2024 no-js