Phishing texts trick Apple iMessage users into disabling protection

Threat actors are running smishing campaigns that exploit iMessage behavior by asking recipients to reply (e.g., 'Y') so links from unknown senders become re-enabled, bypassing Apple’s default anti-phishing link disabling. This social engineering TTP both restores clickable links and signals to attackers that the number is responsive, increasing targeting risk. Users are advised not to reply to such texts and to verify claims directly with the relevant organization.