This currently works on all iPhones and one known android phone as of today, a formal complaint has been filed with the carrier and the FCC. I doubt they will do anything about it though since this is SMS protocol working as intended, and any particular spoofing technique is not (from what I can tell) interesting, and not a valid bug report.
I also am not a security expert by any means and would like any references to research materials to help me write a formal report on how this is actually working, but I have very little expertise and kind of just stumbled on this. Any known suite of tools also to help me do this would be great.
The exploit is purely software in nature, there is no use of hardware except the phone obviously, I have a feeling that it may be an issue with the carriers email -> SMS gateway, which to me is something they could probably fix.