Oops, you have clicked a smishing link!

What is smishing?

Smishing is a type of social engineering attack that relies on exploiting human trust through fraudulent SMS.

The smishing text and its contents might trick you into downloading malware or direct you to a fake site to disclose MFA-related or private information.

Like with email phishing, effective protection from smishing depends on the user's ability to identify the attack.  

Some common premises of smishing attacks that will help you identify them are:

• Request for sensitive information (work credentials, financial information, credit card numbers, etc.).
• Request for urgent action from the user.
• Promise money, free services, or products (giveaway contests, shopping rewards, etc.)

How to protect yourself against smishing?

• Don't click any links in the text message. Instead, go directly to official contact channels (e.g. contact the sender by phone).
• Do not respond. That can be enough for the attacker to know that you are active and can trigger a second attempt.
• Check for misspellings and language that is out of place.
• Be cautious if a message is urgent.

How to report smishing?

If you accidently click a link or open an attachment that looked suspicious, you need to report it to Service Desk. You can either:

• Call Service Desk (+4533921262) 
  OR
• Report it in the Service Portal