Scammers Exploit Unsecured Cellular Routers to Blast Phishing Messages
In a disturbing trend that has been ongoing since 2023, scammers have been using unsecured cellular routers in industrial settings to blast SMS-based phishing messages, according to researchers. The routers, manufactured by China-based Milesight IoT Co., Ltd., are being exploited due to their vulnerability and ease of control.
The routers, which are rugged Internet of Things devices that use cellular networks to connect traffic lights, electric power meters, and other remote industrial devices to central hubs, come equipped with SIM cards that work with 3G, 4G, and 5G cellular networks. This allows scammers to remotely control the devices using text messages, Python scripts, and web interfaces.
According to a report by security company Sekoia, these unsophisticated yet effective delivery vectors have been used in campaigns targeting unsuspecting individuals. "The use of unsecured cellular routers is a classic example of how IoT devices can be exploited for malicious purposes," said a spokesperson for Sekoia. "These devices are often overlooked and left unpatched, making them an attractive target for scammers."
The Milesight routers have been used in various industrial settings, including traffic management systems and power grids. The vulnerability of these devices has raised concerns among experts about the potential for widespread attacks on critical infrastructure.
"It's not just a matter of sending phishing messages; it's about compromising the entire system," said Dr. Rachel Kim, an expert in IoT security. "If scammers can gain control of these routers, they could potentially disrupt critical services or steal sensitive information."
The use of unsecured cellular routers for malicious purposes highlights the need for better security measures and regular updates to prevent such attacks. As researchers continue to investigate this trend, it is essential that manufacturers and users take steps to address the vulnerability of these devices.
In response to the report, Milesight IoT Co., Ltd. issued a statement saying they are working closely with Sekoia to identify and patch vulnerabilities in their routers. "We take the security of our products seriously and appreciate the efforts of researchers to bring this issue to light," said a spokesperson for the company.
As the investigation continues, experts warn that individuals should remain vigilant against phishing messages and report any suspicious activity to authorities. With the potential for widespread attacks on critical infrastructure, it is crucial that manufacturers, users, and regulatory bodies work together to address the vulnerability of unsecured cellular routers.
Background
The use of IoT devices in industrial settings has become increasingly common in recent years. However, as these devices become more integrated into our daily lives, they also become potential targets for malicious actors. The Milesight routers are just one example of how vulnerable IoT devices can be exploited for phishing and other attacks.
Current Status and Next Steps
The investigation into the use of unsecured cellular routers is ongoing, with Sekoia working closely with manufacturers to identify and patch vulnerabilities. As researchers continue to investigate this trend, it is essential that individuals remain vigilant against phishing messages and report any suspicious activity to authorities.
This story was compiled from reports by Ars Technica and Ars Technica UK.
