iPhone Users Targeted by Innovative ‘Smishing’ Scam Exploiting Apple’s Security Safeguards

Hackers are becoming more and more innovative, and the latest victims of their exploits are iPhone users. The iPhone ecosystem is an isolated and walled ecosystem that filters out unwanted and potentially malicious links.

However, hackers have found a way to hoodwink even the best and most secure platforms like the iPhone.

The scam is initiated as soon as an iPhone user receives a fraudulent message, which could be in the guise of an unpaid toll or issues with a shipment.

The message seems innocuous and authentic, and some iPhone users end up replying to them.

‘Smishing’ Scam Targets iPhone Users

It is a phishing scam and involves scammers tricking iPhone users into disabling the iPhone’s built-in security system, allowing them to access the device. As already mentioned, the Apple ecosystem is foolproof and almost impossible to penetrate.

However, if the scammer manages to get into the walled ecosystem, they will have complete access to the user’s personal and sensitive information.

The fraudulent message could be about unpaid toll tax or issues with the shipment of a product and typically reads as follows:

“Please reply Y, then exit the message, reopen it to activate the link, or copy and paste the link into your Safari browser to open it.”

Once the user replies to such messages, the Apple ecosystem’s security is compromised. The ecosystem regularly filters out links from unknown senders to protect users from potential phishing attacks.

However, if the user replies to the message or adds the sender to their contact list, the links are activated.

The messages look authentic, and hence some iPhone users end up replying to them. That’s where things go downhill. Apple’s iMessage automatically disables unknown links.

However, if a recipient replies to such a message or adds the sender to their contact list, the links are reactivated.

The scammers are using fake E-ZPass SMS to trick users into believing that they owe unpaid tolls, something akin to the EZDriveMa hoax.

The SMS informs users that they owe money for E-ZPass tolls and provides a link that must be pasted into their browser to “settle” the payment before incurring late fines.

This type of “phishing” is known as “smishing.” It involves sending SMS messages in the names of reputable commercial entities with links.

Clicking on the links in the SMS can compromise the user’s credit card numbers, passwords, and other financial or personal information.

Also, the messages ask for modest amounts like $6.99, and the small amount does not invite suspicion, perfectly aiding the scam’s efficacy.

Also Read: The Simpsons ‘Prediction’ of Global Internet Outage On 16 January 2025 Sparks Online Frenzy and Humorous Reactions