It has been reported that a new SMiShing campaign is targeting T-Mobile customers. This type of message is like SMiShing campaigns recently targeting Verizon Wireless customers, which thank recipients for paying their bills and include a link to accept a free gift. However, the message is delivered via group text to multiple recipients at random, and has been sent to the targets numerous times over the course of three days. Since the messages were sent via group text, customers could not block them. It is likely that customers were targeted, in part, due to breaches in the past that affected T-Mobile and exposed various types of sensitive information.

Recommended Actions

Whenever possible, users should navigate directly to official websites and refrain from clicking links delivered by SMS text messages from unknown sources. Lastly, do not provide sensitive information to unverified websites.