SMS Spam and Mobile Messaging Attacks Introduction ... - GSMA

GSMA Spam Reporting Service
SMS Spam and Mobile Messaging Attacks - Introduction, Trends and Examples
January 2011
4. VASP Abuse – Unsolicited messages sent to subscribers from services providers for
marketing purposes. In many countries this is regulated and prosecutions against
attackers have begun to increase.
5. Mobile Malware including Bots spreading via messaging – Malware, short for malicious
software, is software designed to infiltrate a mobile device without the owner’s
informed consent. Typically this involves mobile messages sending links to and asking
to download executables that are harmful and lead to application exploits. Three of the
most common forms of malware include:
- Virus: A malicious computer application that is able to reproduce itself. It can only infect a new host if it is
distributed to the host through some means outside of the capability of the computer program.
- Worm: Self-propagating malicious computer program. It uses some means to send copies of itself to other
nodes on the network. A worm can spread and infect many hosts very quickly in a networked environment.
- Trojan: A computer program that doesn’t replicate, but instead enables hackers un-authorized access into
the infected host. Keystroke loggers are a severe form of a Trojan.
Customers of Santander bank were recently targeted in an attack where PC botnets
were used to harvest customers’ internet banking and mobile phone details which, in
turn, were used to send a virus to their mobile phones. Once the phone was infected the
attackers were able to authenticate internet payment instructions using the code sent to,
and captured from, the mobile device, removing thousands of dollars from customer
accounts.
6. Acceptable Use Policy Violations - Subscriber generated abuse in violation of acceptable
use policy for type, content and volume. Subscriber groups could include users that are
underage, part of a restricted corporate HR policy or data plan, or restricted due to time
of day.
E.g. Underage children accessing pornographic content, corporate users forwarding
personal emails to colleagues wasting company time and money, or opening up
pornographic content on their business accounts.