Surge in Mobile Threats: SMS Blaster Scams and AI-Driven Risks
Attackers are increasingly targeting mobile devices using advanced techniques, including the deployment of 'SMS blasters'—devices that impersonate cell towers to send phishing texts over downgraded 2G networks. This method allows threat actors to bypass carrier-level security filters, exposing users to a higher risk of credential theft and data compromise. Security experts warn that the proliferation of such tactics, combined with the growing sophistication of mobile malware, underscores the urgent need for robust mobile security measures.
The latest industry reports highlight that the convergence of AI-driven attacks and human error is creating a 'perfect storm' for mobile security. The widespread use of generative AI on mobile endpoints, often without adequate safeguards, has expanded the attack surface, leading to increased incidents of phishing and data loss. Organizations that implement strict access controls and comprehensive mobile management policies have demonstrated greater resilience, experiencing fewer breaches and more rapid containment of mobile threats.
Get ahead of threats like this
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
How this story unfolded
3 events from the most recent confirmed update back to the earliest known activity.
Zimperium warns of surge in SMS blaster text scams using fake cell towers
Zimperium published a report warning that SMS blaster text scams were increasing and highlighted risks from fake cell tower infrastructure used to deliver fraudulent messages.
Zimperium warns AI and human error are increasing mobile security risk
Zimperium published a Mobile Threat Watch article describing how AI-driven threats and user mistakes are combining to worsen mobile security exposure.
AhnLab publishes weekly mobile malware and security roundup
AhnLab ASEC published its 'Mobile Security & Malware Issue 4st Week of October, 2025' report, summarizing mobile malware and security issues observed during the fourth week of October 2025.
Sources
3 references tracked. Mallory keeps watching after this page renders.
Mobile Security & Malware Issue 4st Week of October, 2025
asec.ahnlab.com
Open sourceAI and Human Error Create a “Perfect Storm” for Mobile Security
zimperium.com
Open sourceSMS Blaster Text Scams Surge, Experts Warn of Fake Cell Tower Risks
zimperium.com
Open sourceSee the full picture, correlated to your attack surface.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Related stories
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
AI-Driven Scam Defense and the Rise of Fraudulent SMS Threats on Mobile Platforms
Android has implemented an AI-powered Scam Defense system that reportedly blocks 10 billion monthly threats, with users being 58% more likely to avoid scam texts compared to iOS users. This development comes amid a surge in cybercriminal activity leveraging artificial intelligence to craft more convincing and frequent fraudulent SMS messages, targeting mobile users at scale. Industry experts highlight that 73% of sophisticated cyber attacks now utilize AI, and 89% of successful breaches involve AI-enhanced social engineering. The effectiveness of AI-driven phishing, such as GPT-4-powered campaigns, has led to a 43% click rate, significantly higher than traditional methods. While organizations are rapidly adopting AI for business, only a minority have implemented robust AI security governance, leaving both enterprises and consumers vulnerable to advanced SMS-based scams. Messaging platforms, unlike email, lack comprehensive security standards, making them a preferred vector for attackers exploiting the immediacy and high open rates of text messages.
Jun 29, 2026
AI-Driven Phishing and Social Engineering Threats in 2025-2026
Security researchers and industry experts are warning of a dramatic escalation in phishing and social engineering attacks, driven by the adoption of AI by both attackers and defenders. Reports highlight that threat actors are leveraging AI to craft highly targeted, convincing phishing emails, automate attack campaigns, and reduce the time from initial compromise to full breach to under an hour. Human Resources-themed phishing, especially termination and compensation adjustment lures, have surged in Q3 and Q4, exploiting employee trust and urgency. Security teams are urged to maintain a human-in-the-loop approach, as over-reliance on AI for detection can create blind spots, and context-driven analysis is now essential to counter increasingly sophisticated tactics. Technical research and incident analysis reveal that attackers are using a variety of new techniques, including voicemail lures, open redirects, and legitimate hosting platforms to bypass traditional email security controls. The rise of mobile device attacks, supply chain threats via malicious apps, and the use of AI prompt injection in CI/CD pipelines further expand the attack surface. Experts recommend organizations strengthen mobile security, enrich detection with threat intelligence, and ensure skilled analysts remain involved in incident response to keep pace with the evolving threat landscape.
Jun 29, 2026
Emerging Mobile Threats and Security Gaps in Banking and Endpoint Protection
A newly identified Android banking trojan is exploiting weaknesses in traditional antivirus defenses by using SMS-based distribution and overlay tactics to steal credentials, highlighting the limitations of signature-based detection and the need for behavior-based mobile security. This threat, along with a documented cyber-espionage campaign where attackers used stolen credentials to hijack cloud-based device management tools and remotely wipe Android devices, demonstrates how mobile endpoints are increasingly being weaponized for both financial theft and sabotage. The sophistication of these attacks underscores the necessity for organizations to treat mobile devices as critical assets, implementing continuous monitoring, strict OS patching, and robust incident response protocols. In response to the growing threat landscape, Google has expanded its Android in-call scam protection feature to major U.S. financial apps such as Cash App and JPMorgan Chase. This feature warns users when they may be targeted by social engineering scams during calls, aiming to disrupt attackers' manipulation tactics and prevent unauthorized access to banking information. As mobile devices become central to both personal and enterprise operations, the convergence of advanced malware, endpoint exploitation, and enhanced security features reflects the urgent need for comprehensive mobile security strategies.
Jun 29, 2026