{"id":13227,"date":"2023-02-09T13:05:23","date_gmt":"2023-02-09T12:05:23","guid":{"rendered":"http:\/\/nfirjun2026.local\/cyber-security-awareness-for-security-awareness-in-the-workplace\/social-engineering-make-humans-the-strongest-link\/smishing\/"},"modified":"2025-10-20T19:33:34","modified_gmt":"2025-10-20T17:33:34","slug":"smishing","status":"publish","type":"page","link":"https:\/\/www.cyber-security-online.nl\/en\/cyber-security-awareness-for-security-awareness-in-the-workplace\/social-engineering-make-humans-the-strongest-link\/smishing\/","title":{"rendered":"Smishing"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Smishing<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
Employees are exposed to realistic cyber attacks during smishing tests to raise awareness.<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"NFIR\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"NFIR\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Smishing<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
Employees are exposed to realistic cyber attacks during smishing tests to raise awareness.<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

It is often a text message that often makes us very happy “your package is on its way. In a hurry, we want to click on the link and follow the package. It is precisely this human curiosity that cybercriminals exploit at that moment. These and more advanced social engineering techniques are used in smishing. Smishing is a type of phishing attack that uses text messages. Every employee in your organization who has access to a mobile device is a potential target of smishing. With a smishing test, you reduce the chances that your employees will actually fall prey to this hard-to-detect form of phishing.<\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"Social\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

How does smishing work?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
Smishing (SMS phishing) is the fraudulent practice of sending text messages to mobile devices that appear to come from financial institutions or legitimate businesses. Smishing works by posing as a trusted contact, bank or company and tricking the user into providing sensitive information. Smishing messages often contain malicious links that direct users to fake websites that mimic legitimate services. Smishing messages often have an urgent tone and ask the user to call a number immediately to resolve a situation. The messages are sent directly to your cell phone and appear to come from someone you know or trust, so it can be easy to click on the links. The purpose of smishing is to obtain sensitive personal information such as account numbers, passwords or other personally identifiable information. As with all social engineering attacks, smishing again exploits human characteristics. That makes every employee of every organization susceptible to being victimized by smishing.<\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Why should my organization conduct a smishing test?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

A legitimate text message and one coming from a cybercriminal are very similar and difficult to distinguish. Therefore, the success rate of a smishing attack is high. As a result, such an attack among employees may not be noticed immediately and its reporting may be delayed or fail altogether. Every employee today has access to one or more phones, making everyone a potential target. Cybercriminals know this well and obviously take advantage of it. It is therefore a common phishing method.<\/a> What is unique about this method is that it puts the attacker in direct contact with humans. This direct contact provides opportunities that the attackers can make good use of. This allows them to easily apply different social engineering techniques, which they can adjust immediately to get the best results. Thus, they build a bond of trust or, remove suspicion and respond to the victim’s emotion. <\/span><\/p>

During our smishing test, we also use the social engineering techniques mentioned above. That way, we can mimic an authentic attack as much as possible during the test. After all, cybersecurity awareness increases the most when employees encounter tangible examples. A smishing test brings the consequences of smishing very close and makes it very clear how difficult it is to distinguish an authentic text message from a smishing attack. The smishing test will b<\/span>contribute to understanding and awareness and get organizations thinking. Key findings from this exercise will lead to action items needed to reduce the impact in the event of a potential incident.<\/span> <\/span>The result of a smishing test provides a good basis for taking targeted measures in line with laws and regulations and that match your organization’s pain points. Current AVG laws and regulations require organizations to take appropriate measures to eliminate cyber risks as much as possible. <\/span><\/p>

<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
<\/div>\n\t\t\t\t
<\/div>\n\t\t\t<\/div>\n\t\t\t\t\t\t\t
\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t

\n\t\t\t\t\t\tBecome resilient against the most common technique used by cybercriminals
\t\t\t\t\t<\/h2>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\tBecome resilient against the most common technique used by cybercriminals\t\t\t\t\t<\/div>\n\t\t\t\t\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\tContact our security awareness account managers\t\t\t\t\t<\/a>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t