iMessage text gets recipient to disable phishing protection so they can be phished

A smishing campaign is targeting iMessage users by instructing recipients to reply or add senders to contacts, which disables iMessage’s link-blocking protections and enables malicious links; variants instruct users to open links in Safari or Chrome. The report explains the social-engineering technique, shares example message text, and provides user-focused mitigation steps such as never replying to unknown messages, not adding unknown contacts, verifying links, and using message-filtering tools.