{"id":2151,"date":"2025-01-27T21:53:00","date_gmt":"2025-01-27T21:53:00","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/2025\/01\/27\/usps-impersonators-use-pdfs-in-smishing-attacks\/"},"modified":"2025-01-27T21:53:00","modified_gmt":"2025-01-27T21:53:00","slug":"usps-impersonators-use-pdfs-in-smishing-attacks","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/usps-impersonators-use-pdfs-in-smishing-attacks\/","title":{"rendered":"USPS Impersonators Use PDFs in Smishing Attacks"},"content":{"rendered":"\n<\/p>\n<p><strong>US Postal Service Impersonation Scam: A Widescale Mobile Phishing Campaign<\/strong><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">Attackers impersonating the US Postal Service (USPS) are striking again, this time in a large-scale mobile phishing campaign that exploits people&#8217;s trust in PDF files. This time, it uses a novel evasion tactic to steal credentials and compromise sensitive data in SMS phishing (smishing) attacks.<\/span><\/p>\n<p><strong>Smishing Campaign Discovered by Zimperium zLabs<\/strong><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">Researchers at Zimperium zLabs have discovered a smishing campaign that uses malicious SMS messages informing people that their package can&#8217;t be delivered because of &#8220;incomplete address information,&#8221;<\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\"><a class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" target=\"_self\" href=\"https:\/\/www.darkreading.com\/cyberattacks-data-breaches\/fbi-smishing-campaign-unpaid-toll-notices\" rel=\"nofollow noopener\">revealed in a recent report<\/a><\/span><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">. The campaign is designed to trick users into divulging sensitive information.<\/span><\/p>\n<p><strong>The Need for Enterprise Security Measures<\/strong><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">Indeed, organizations need to get a handle on the issue of unsecured mobile devices in the workplace, another expert says. To do this, notes Darren Guccione, CEO and co-founder at Keeper Security, they should adopt a layered security approach that combines employee education with the use of multifactor authentication (MFA) to prevent credential compromise even if a corporate user falls for an attack.<\/span><\/p>\n<p><strong>Zero-Trust Security Frameworks and PAM Solutions<\/strong><\/p>\n<p class=\"ContentParagraph ContentParagraph_align_left\" data-testid=\"content-paragraph\"><span class=\"ContentText ContentText_variant_bodyNormal\" data-testid=\"content-text\">As far as enterprise security goes, he explains, employing zero-trust security frameworks that use privileged access management (PAM) solutions can serve to further mitigate risks &#8220;by restricting access to sensitive systems, ensuring only authorized users can interact with critical data.&#8221;<\/span><\/p>\n\n<br \/><a href=\"https:\/\/www.darkreading.com\/endpoint-security\/usps-impersonators-pdfs-smishing-campaign\" rel=\"nofollow noopener\" target=\"_blank\">Source Link<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>US Postal Service Impersonation Scam: A Widescale Mobile Phishing Campaign Attackers impersonating the US Postal Service (USPS) are striking again, this time in a large-scale mobile phishing campaign that exploits&#8230;<\/p>\n","protected":false},"author":19,"featured_media":2152,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[],"class_list":["post-2151","post","type-post","status-publish","format-standard","has-post-thumbnail","category-cybersecurity"],"jetpack_featured_media_url":"https:\/\/fusionmindlabs.com\/blogs\/wp-content\/uploads\/sites\/9\/2025\/01\/Francis_Vachon_usps_alamy.jpg","_links":{"self":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/2151","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/comments?post=2151"}],"version-history":[{"count":0,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/2151\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media\/2152"}],"wp:attachment":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media?parent=2151"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/categories?post=2151"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/tags?post=2151"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}