The FBI has issued a warning about a notable increase in a cyber threat referred to as 'smishing,' a combination of SMS and phishing, which involves sending deceptive text messages intended to trick individuals into revealing confidential information.

This alert points to a concerning trend that is said to be 'spreading from state to state' throughout the United States.

In light of the rising danger, cybersecurity officials are urging both iPhone and Android users to be cautious and delete any suspicious messages they receive.

According to data from cybersecurity firm Palo Alto Networks' Unit 42, reports indicate that more than 10,000 malicious domains have been registered to aid these schemes.

Smishing attacks typically use a variety of tactics to entice individuals into compromising their financial data.

Common methods include:
- Urgent Notifications: Messages claiming immediate issues concerning bank accounts or delivery services.
- Attractive Offers: Communications that promise prizes or discounts in exchange for personal information.
- Impersonation of Authorities: Texts masquerading as messages from genuine organizations such as banks or government agencies.

To execute these scams, criminals often impersonate well-regarded organizations, including banks and delivery companies like DHL or FedEx, and governmental bodies.

This tactic is intended to foster a false sense of trust and urgency, urging recipients to click on harmful links or respond with private information.

A recent study on smishing has uncovered a concerning prevalence of fraudulent domains using the Chinese .XIN top-level domain (TLD).

Some notable examples of fraudulent domain names identified in these schemes include:
- dhl.com-new[.]xin
- ezdrive.com-2h98[.]xin
- fedex.com-fedexl[.]xin
- thetollroads.com-fastrakeu[.]xin
- usps.com-tracking-helpsomg[.]xin

These URLs are cleverly crafted to mimic legitimate services, enhancing their ability to mislead unsuspecting victims.

Interacting with these links can direct users to phishing sites designed to collect personal and financial information.

In response to these threats, major cities like Boston, Denver, Detroit, Houston, and San Diego have issued public alerts.

Authorities advise individuals to avoid clicking on links in unsolicited messages, verify the sender's authenticity through official communication channels, and remain alert to the pressure tactics used by scammers.

Furthermore, users are encouraged to use spam filters and report any suspicious messages to their mobile service providers.

The smishing phenomenon is constantly evolving, with attackers refining their strategies and taking advantage of the ongoing dependence on mobile communication, affecting consumers across the nation.