USPS Battles Increasing Smishing Threats: Is the Postal Service Anchoring Snowballing Cyber Attacks?

Increasing Cyber Campaign Targets US Postal Service with Smishing and Phishing Tactics

A recent cyber campaign targeting the United States Postal Service (USPS) has raised concerns due to the increasing volume and sophistication of the attacks. Threat actors are utilizing smishing (SMS phishing) and phishing tactics, using a wide range of domains as infrastructure for their malicious activities. The surge in these campaigns prompted DomainTools, a leading cybersecurity company, to investigate the matter further.

Investigation Reveals Ominous Findings

DomainTools examined one of the smishing messages and discovered that the domain provided at the end of the message, mehdi\.kh021@yahoo[.]com, was associated with 71 other domains. Another email address with a similar naming convention, mehdi.k1989@yahoo[.]com, was connected to an additional 63 domains. In total, the researchers identified 164 domains being used in this specific campaign.

Moreover, the research team uncovered an example of a smishing message that used suspicious wording, likely indicating a reused script and the work of a non-native English speaker. The researchers acknowledged that if the threat actor had employed artificial intelligence (AI) tools like ChatGP, the smishing message could have been even more convincing, posing an even greater risk to unsuspecting recipients.

According to Roger Grimes, a data-driven defense evangelist at KnowBe4, a cybersecurity training and phishing simulation platform, the prevalence of these USPS SMS scam messages has notably increased in recent weeks. The scams follow a familiar pattern, claiming delayed packages and urging recipients to click on a provided link to resolve the issue. These scams are disturbingly ordinary yet realistic, making them effective tools for malicious actors.

Social Media Accounts Indicate Lack of OpSec

The researchers at DomainTools also observed a lack of operational security (OpSec) in this campaign. They discovered a Facebook account tied to the domains used in the attacks, which led them to identify the threat actor as an Iranian national residing and working in Tehran, potentially connected to the Islamic Azad University.

The Growing Threat of Phishing and Smishing Campaigns

While phishing and smishing campaigns have become an unfortunate reality of our daily lives, their impact extends beyond individuals. These cyberattacks pose a significant risk to the companies and organizations whose services they exploit. As DomainTools aptly notes, identifying the infrastructure and perpetrators behind such campaigns is crucial for law enforcement and other entities to respond promptly and mitigate the harm caused.

However, the escalating volume and sophistication of these attacks call for concerns beyond immediate mitigation. With threat actors continually adapting and improving their tactics, it is imperative to prioritize internet security measures and educate individuals on recognizing and confronting these threats.

The Importance of Internet Security

In today’s interconnected digital landscape, internet security should be a top priority for individuals, businesses, and organizations alike. To safeguard against phishing and smishing attacks, it is crucial to follow best practices:

1. Exercise Caution with Links and Attachments

Do not click on suspicious links or open attachments from unknown or unverified sources. Always verify the legitimacy of the sender before interacting with any email or message content.

2. Be Cautious of Urgency and Unusual Requests

Attackers often create a sense of urgency to manipulate victims into taking immediate action. Be skeptical of messages that demand immediate responses or contain unusual requests, especially if they come from seemingly reputable organizations like USPS.

3. Stay Updated with the Latest Threat Intelligence

Keep yourself informed about the latest phishing and smishing techniques, as threats constantly evolve. Regularly consult reliable sources of information and news to stay ahead of potential attacks and mitigate risks.

4. Employ Reliable Security Software

Use reputable antivirus and antimalware software to protect your devices from malicious programs and help identify potential threats before they can cause harm.

Remaining Vigilant in the Face of Cyberattacks

The onslaught of phishing and smishing campaigns, such as the one targeting USPS, emphasizes the need for continuous vigilance and proactive cybersecurity efforts. Individuals, organizations, and governments must collaborate to enhance defenses against these ever-evolving threats while ensuring law enforcement agencies have the necessary tools and support to identify and prosecute those responsible.

By adhering to robust security practices, staying informed, and cultivating a culture of cybersecurity, we can minimize the impact of phishing and smishing campaigns and protect ourselves from falling victim to malicious actors.