Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News Editorials & Other Articles General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

usonian

(15,135 posts)
Tue Jan 14, 2025, 10:53 PM 10 hrs ago

Do not reply to suspicious texts. Here's why.

Phishing texts trick Apple iMessage users into disabling protection

https://www.bleepingcomputer.com/news/security/phishing-texts-trick-apple-imessage-users-into-disabling-protection/

IN SHORT. WHEN IN DOUBT, DO NOT REPLY.

To protect users from such attacks, Apple iMessage automatically disables links in messages received from unknown senders, whether that be an email address or phone number.

However, Apple told BleepingComputer that if a user replies to that message or adds the sender to their contact list, the links will be enabled. (OHHH NOOOOH)

As you can see below, a fake USPS shipping issue and a fake unpaid road toll text were sent from unknown senders, and iMessage automatically disabled the links.


I get a lot of these: Notice the disabled links.



It's called smishing.

As users have become used to typing STOP, Yes, or NO to confirm appointments or opt out of text messages, the threat actors are hoping this familiar act will lead the text recipient to reply to the text and enable the links. Doing so will enable the links again and turn off iMessage's built-in phishing protection for this text.


And of course, replying tells the bad guys that your address (which they may have gotten at random) is real, and keep sending crap.

IN SHORT WHEN IN DOUBT, DO NOT REPLY. Just




Several other sites say the same thing, but this is short, to the point, and has a (unfortunately familiar) graphic.
https://www.macworld.com/article/2575750/hackers-have-devised-a-simple-text-scam-to-bypass-apples-iphone-protections.html
https://www.heise.de/en/news/Against-iMessage-protection-New-phishing-scam-to-trick-Apple-users-10242733.html
6 replies = new reply since forum marked as read
Highlight: NoneDon't highlight anything 5 newestHighlight 5 most recent replies
Do not reply to suspicious texts. Here's why. (Original Post) usonian 10 hrs ago OP
Good advice EarlG 10 hrs ago #1
Yes, good advice. I also block the numbers. Auggie 3 hrs ago #4
Thanks thinkingagain 10 hrs ago #2
🤡 From 3 years ago. ItsjustMe 10 hrs ago #3
I have gotten quite a few "UPS undeliverable" texts.. I just dump them. If I really have a question I bypass the link mitch96 3 hrs ago #5
Highly recommended. Go to a verified website or call a verified number. usonian 2 hrs ago #6

EarlG

(22,657 posts)
1. Good advice
Tue Jan 14, 2025, 11:01 PM
10 hrs ago

I don't even open messages if they come from numbers I don't recognize and am not expecting. Just immediately swipe left on the message header, delete, and report as spam.

thinkingagain

(1,066 posts)
2. Thanks
Tue Jan 14, 2025, 11:03 PM
10 hrs ago

Interesting
last week or week before
Hubby got one like this and I got the other

I did not know the part about apple disabling the link to protect you if from unknown sender

mitch96

(14,819 posts)
5. I have gotten quite a few "UPS undeliverable" texts.. I just dump them. If I really have a question I bypass the link
Wed Jan 15, 2025, 05:52 AM
3 hrs ago

and go straight to UPS website and see what's up...
m

usonian

(15,135 posts)
6. Highly recommended. Go to a verified website or call a verified number.
Wed Jan 15, 2025, 06:34 AM
2 hrs ago

Links can be deceptive. People who are called should call back, but to the known entity's number.

I'd like to say search, but search engines (starts with a G) allow fake names and ads to pop to the top of search results.

Use your judgment.

Latest Discussions»Culture Forums»Apple Users»Do not reply to suspiciou...