SMS Phish - An Incident Walkthrough

This report analyzes a Cash App-themed SMS phishing (smishing) campaign that targeted a high-value corporate user, detailing OPSEC methods to safely access the phishing landing pages, evidence the attacker used mobile-targeting and UA checks, the steps of PII and credit-card harvesting, a list of observed malicious domains, and recommended defensive measures to mitigate such attacks.