The Rising Threat: How USPS Anchors Snowballing Smishing Campaigns

Investigation Reveals Snowballing Cyber Campaign Targeting USPS

Increasing Volume of Smishing and Phishing Attacks

A recent investigation by DomainTools has uncovered a concerning cyber campaign targeting the US Postal Service (USPS). The campaign utilizes smishing and phishing tactics, and the volume of these attacks has risen significantly in recent weeks. While these tactics are not new in the cyber world, the sheer number of campaigns being carried out is alarming.

Domains Used in the Attacks

DomainTools’ investigation revealed that close to 200 different domains have been used as infrastructure for these attacks. One unique email address, mehdi\.kh021@yahoo[.]com, was found to be associated with 71 other domains. Another email address, mehdi.k1989@yahoo[.]com, which differs by only five characters after the period, was linked to an additional 63 domains. In total, 164 domains have been identified as being used in this campaign.

Inadequate OpSec and Suspicious Phrasing

DomainTools also discovered that threat actors involved in these attacks have exhibited a lack of operational security (OpSec). The researchers found that social media accounts tied to the email addresses used in the campaigns indicated the involvement of an Iranian national residing in Tehran and potentially associated with the Islamic Azad University. This lack of proper OpSec raises concerns about the attackers’ potential capabilities and intentions.

The investigation also highlighted a sample smishing message that displayed suspicious phrasing, potentially indicating the use of a reused script and involvement of a non-native English speaker. Researchers speculate that the threat actor could have made the messages even more convincing and harmful by employing artificial intelligence (AI) tools like ChatGP.

The Significance of Phishing and Smishing Campaigns

Phishing and smishing campaigns have become an unfortunate daily reality for individuals, as well as the organizations and companies they engage with. These malicious schemes pose a significant threat, both in terms of financial loss and reputational damage.

Importance of Identifying Infrastructure and Perpetrators

DomainTools emphasizes the importance of identifying the infrastructure used in these campaigns and determining the actors behind them. This information is crucial for law enforcement and other organizations to promptly mitigate the issue and protect potential victims from falling prey to these scams.

Enhancing cybersecurity Measures

As these cyber campaigns continue to rise in frequency and sophistication, it is crucial for individuals and organizations to bolster their cybersecurity measures. The following are some key steps to consider:

• Educate and Raise Awareness: Individuals should be aware of the common tactics used in phishing and smishing campaigns and should exercise caution when interacting with suspicious messages or links. Organizations should regularly conduct training and education programs to keep employees informed and vigilant.
• Use Strong Authentication: Enable multi-factor authentication wherever possible to add an extra layer of security to accounts and reduce the risk of unauthorized access.
• Keep Software Updated: Regularly update operating systems, applications, and antivirus software to ensure the latest security patches are in place.
• Implement Email Security Measures: Organizations should adopt email security solutions that can detect and block phishing and smishing attempts, including filtering out suspicious emails and links before they reach users’ inboxes.
• Report Incidents: Individuals and organizations should promptly report any cyber incidents or suspicious activities to the relevant authorities or their IT departments to enable swift action and potential prevention of further attacks.

In conclusion, the escalating cyber campaign targeting the USPS through smishing and phishing tactics is an alarming development. The increasing volume of these attacks underscores the need for robust cybersecurity measures and proactive efforts to educate and raise awareness among individuals and organizations. By being vigilant, maintaining up-to-date security systems, and promptly reporting any incidents, the collective fight against cyber threats can be strengthened.

Source: DomainTools