CAPEC-164 Mobile Phishing
abstraction: detailedstatus: activeAn adversary targets mobile phone users with a phishing attack for the purpose of soliciting account passwords or sensitive information from the user. Mobile Phishing is a variation of the Phishing social engineering technique where the attack is initiated via a text or SMS message, rather than email. The user is enticed to provide information or visit a compromised web site via this message. Apart from the manner in which the attack is initiated, the attack proceeds as a standard Phishing attack.
likelihood: Highseverity: High
01
weaknesses (1)
The CWE weakness classes this flaw belongs to.
02
related attack patterns (1)
Related entries.
03
source
Where this definition is published.