Management Alert - Active Smishing Campaign Masquerading as the U.S. Postal Service
Introduction
During our audit of the Integrity of Postal Service’s Social Media Presence, we found a smishing campaign that may have a significant negative impact on the Postal Service’s brand, reputation, and customer loyalty. Smishing is a mobile phishing attack that targets victims using text messages rather than emails. These messages appear to be sent by legitimate, trusted organizations like the Postal Service. Smishing attacks attempt to trick mobile users into clicking on links that are connected to fraudulent sites that could steal credentials or propagate malware.
Conclusion
We found the Postal Service had not informed the public of an active large-scale smishing campaign that used the Postal Service as a disguise. This malicious campaign could negatively impact the Postal Service’s brand, reputation, and customer loyalty.