Guarding Against Phone Scammers: An Examination of Gaining Access to Phone Contacts through Smishing Social Engineering Exploits
Eric Blancaflor, Drizzle Joy V. Caberto, Charlene Grazielle E. Lara, l. Mancilla Danielle Franchesca · 2024
In the digital era, the prevalence of smartphones and contact numbers has become indispensable, yet it has exposed individuals to cybersecurity threats, notably smishing attacks. Smishing, a form of social engineering attack, leverages text messages to deceive victims into downloading malware, divulging personal information, or sending money to malicious actors. Despite efforts like the SIM Registration Act in the Philippines, vulnerabilities persist, necessitating robust cybersecurity measures. This research employs penetration testing to replicate scammers' techniques, even with numbers registered under the Act, shedding light on ongoing challenges and the need for improved cybersecurity protocols. Its significance lies in contributing to the protection of Filipino citizens from cyber threats following SIM card registration. With evolving smishing techniques threatening SIM card holders, this study systematically examines these methods, offering insights into cybersecurity and assisting in developing more robust security measures. It underscores the role of human behaviors and knowledge gaps in rendering individuals vulnerable to cybercrimes, emphasizing the importance of comprehensive cybersecurity measures encompassing education and awareness initiatives. As the cyber threat landscape evolves, adapting strategies and policies to address the human aspects enabling cybercriminals to exploit vulnerabilities becomes imperative.