What Is Smishing and How Organisations Can Protect Themselves

**Executive Summary:** This report describes smishing (SMS phishing) as an increasingly common social-engineering vector, highlights a 2022 Twilio-related credential compromise that impacted over 130 connected organizations, explains typical smishing tactics and potential outcomes (credential theft, malware installation, enabling ransomware or BEC), and provides guidance for preventing such attacks.