Smishing is phishing delivered through SMS text messages. It is a social-engineering technique that uses deceptive communication to manipulate people into disclosing information or taking an action. section 11.2.2
Recognize smishing by its position among related attacks:
- Phishing uses deceptive messages broadly; spear phishing targets particular employees, whaling targets high-profile individuals, smishing uses SMS, and vishing uses phone calls. section 11.2.2
- Treat smishing as part of the broader social-engineering threat landscape, where awareness and user training help people recognize and respond to attacks. section 11.6
