Not long ago I had heard that someone from my family had an suspicious situation with SMS service.
What happened was this person receive message like
Service 'Play music on calls' have been enabled. To turn off this service, send message ENABLE to number xxx-xxx-xxx
First lets start off that this person did not turned on any service manually, and I never experienced anyone to have service like that turned on automatically - it always was optional and was turning on through text like
Also for me it was seemed suspicious that you have to send message
ENABLE to turn off service, and the number was 9 digit which is not used for services like this in this specific country, where most of such services are 4 up to 6 digit long.
The person with this have went to local office of this mobile operator, and the young lady (about 20-25 years) in there and looked like on idiot, and said that you need to send this message to turn it off, without checking number and anything else.
Then this lady sent message
ENABLE to this number and then return message was sent something like:
To turn off service you need to send back this randomly generated key: XXXXXX
The lady in there send this key back to this number, however I have no more informations, did she also accepted something else as well etc.
Unfortunately this is also suspicious for me, because I never heard of service which would require you to send back randomly generated key, to be turned off.
The service apparently was disabled, however there are various problems now such as it seems problematic to make incoming call to this member of family.
Also later on I have checked this number on internet and there was opinions that it is malicious number, not specific for such services.
I got few questions:
- What could be attackers point in such attack - the attacker did not get any personal data etc. so it doesn't seems to be phishing.
- What type of attack this could be
- What should be done in such case and how to explain it to older person which have no knowledge about social engineering and how it works.
Also this family member want to go back to the same local office of mobile operator, which I think is a bad idea due to what happened last time. I think that this person should call the main customer services from this mobile operator.
Please note that I have no idea which tags give to this question.