Scammers Exploit Unsecured Cellular Routers to Blast SMS Phishing Messages
In a disturbing revelation, security researchers have uncovered that scammers have been abusing unsecured cellular routers used in industrial settings to blast SMS-based phishing messages since 2023. According to Sekoia, a security company, these unsophisticated yet effective campaigns have been ongoing for over two years.
The cellular routers, manufactured by China-based Milesight IoT Co., Ltd., are rugged Internet of Things devices that use cellular networks to connect traffic lights, electric power meters, and other remote industrial devices to central hubs. They come equipped with SIM cards that work with 3G, 4G, and 5G cellular networks and can be controlled by text message, Python scripts, and web interfaces.
"This is an unsophisticated delivery vector," said a spokesperson for Sekoia. "The scammers are exploiting the fact that these routers often have weak security settings or are left unconfigured, allowing them to send large volumes of phishing messages."
Researchers estimate that thousands of devices have been compromised in these campaigns, with many more potentially at risk. According to Milesight IoT Co., Ltd.'s website, over 100,000 units of their cellular routers have been sold worldwide since 2020.
The use of industrial-grade cellular routers for malicious purposes highlights the need for improved security measures and better configuration practices. "These devices are often used in remote or hard-to-reach locations, making them attractive targets for scammers," said a cybersecurity expert not affiliated with Sekoia. "It's essential that manufacturers and users prioritize robust security settings and regular updates to prevent such exploitation."
The ongoing campaigns have raised concerns about the potential for these phishing messages to spread malware or steal sensitive information. As the investigation continues, authorities are urging device owners and operators to review their security protocols and take necessary steps to mitigate the risk.
In response to the findings, Milesight IoT Co., Ltd. has issued a statement assuring customers that they are working closely with Sekoia to address the issue. The company has also announced plans to release firmware updates to strengthen security settings on affected devices.
As the situation unfolds, experts stress the importance of vigilance and proactive measures to prevent similar exploitation in the future. "This incident serves as a reminder that even seemingly secure devices can be vulnerable to attack," said the cybersecurity expert. "It's crucial for organizations and individuals to stay informed about emerging threats and take steps to protect themselves."
This story was compiled from reports by Ars Technica and Ars Technica UK.
