--- title: "Mobile Hacking on the Rise Alongside New Phishing Tactics | DuoCircle" description: "Mobile phishing is not a new phenomenon." image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/blog/phishing-protection/mobile-hacking-on-the-rise-alongside-new-phishing-tactics/" --- Quick Answer Roughly half of phishing attacks now target mobile devices, and they fall into five categories. Three are mobile versions of older attacks: SMS phishing (smishing) impersonating banks and couriers, voice phishing that qualifies victims before a live call (the 2018 iPhone fake-lockscreen scam is a known example), and social media phishing through WhatsApp, Facebook Messenger, and similar apps using scraped public data. Two are mobile-specific. Phone number port-outs use stolen personal data to move a victim's number to a new carrier, often for short windows tied to fraud. Mobile cloning exploits SS7, the 1975-era telecom signaling protocol that has no central authority and remains unsecured, letting an attacker with SS7 access intercept SMS, including SMS-based two-factor codes. Mitigations: avoid SMS as a sole second factor, vet app sources, and apply phishing protection plus a BYOD policy at the org level. Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fphishing-protection%2Fmobile-hacking-on-the-rise-alongside-new-phishing-tactics%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Mobile%20Hacking%20on%20the%20Rise%20Alongside%20New%20Phishing%20Tactics&url=undefined%2Fblog%2Fphishing-protection%2Fmobile-hacking-on-the-rise-alongside-new-phishing-tactics%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fphishing-protection%2Fmobile-hacking-on-the-rise-alongside-new-phishing-tactics%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fphishing-protection%2Fmobile-hacking-on-the-rise-alongside-new-phishing-tactics%2F&title=Mobile%20Hacking%20on%20the%20Rise%20Alongside%20New%20Phishing%20Tactics "Share on Reddit") [ ](mailto:?subject=Mobile%20Hacking%20on%20the%20Rise%20Alongside%20New%20Phishing%20Tactics&body=Check out this article: undefined%2Fblog%2Fphishing-protection%2Fmobile-hacking-on-the-rise-alongside-new-phishing-tactics%2F "Share via Email") ![Mobile Hacking](https://media.mailhop.org/duocircle/images/2019/08/email-sending-services-9576.jpg) Mobile phishing is not a new phenomenon. Almost anyone old enough to remember using pre-smartphone mobile devices also remembers getting suspicious texts and calls from early scammers. Often, _these scam artists used some variant of the now-campy Nigerian Prince scheme to trick victims_. But times have changed. Today’s mobile phishing attacks are sophisticated, high-tech, and largely automated. Mobile phones have taken on a more important role in users’ lives than ever before, and the world’s hackers have access to more data than the previous generations could dream of. Without **mobile phishing protection**, users are vulnerable. The vast majority of cybersecurity content dealing with phishing focuses on the desktop environment. However, mobile users are just as exposed as desktop users are - but they often don’t even know it. Most mobile users (and even some [email security software](/) professionals) are surprised to find out that almost [half of all phishing attacks](https://www.wandera.com/mobile-security/phishing/mobile-phishing-attacks/) happen on mobile. Mobile messaging and social media apps make easy targets, and games, especially iOS games, are another important attack vector. ## Types of Mobile Phishing Attacks Mobile phishing attacks fall into five categories, three of which are new versions of traditional attacks, and the remaining two are totally new. ### 1\. SMS Phishing _SMS phishing is not new, but the prevalence of SMS among mobile users_, especially for dealing with brands and services - makes it a perfect attack vector for today’s enterprising cybercriminal. Most banks, service providers, couriers, and even event ticketing agencies send updates to their users via SMS. All that a hacker has to do is impersonate the right service with an urgent “password reset” message or something similar, and the victim falls right into the trap. While [phishing protection](/email/phishing-protection) can help reduce the threat of **SMS phishing**, users must learn to distinguish between authentic SMS behavior and suspicious SMS behavior. No brand or company is going to rush users into clicking on links to reset passwords or respond to emergencies. ### 2\. Voice Phishing The vast majority of modern phishing scams are automated from start to finish. It might be surprising that there is a market for voice phishing, but there is. Typically, _voice phishing attacks have to qualify their victims before actually talking to them on the phone_, but there are plenty of ways to do that. Consider the sophisticated iPhone **voice phishing scam** that Ars Technica’s [Sean Gallagher](https://arstechnica.com/information-technology/2018/07/click-on-this-ios-phishing-scam-and-youll-be-connected-to-apple-care/) reported on in 2018\. First, an iPhone system alert pops up and claims the phone is locked due to “illegal activity”, then a phone number shows up on the screen. Most reasonable people would accept this at face value and call the number. That’s when the con really begins. ### 3\. Social Media Phishing **Social media phishing** has been around since social media’s advent, but the amount of public data now available to cybercriminals is greater than ever before. _Social media makes it easy to gather intelligence on people and craft unique phishing messages designed to trick them_. Criminals often also use automated tools to scale their attacks. _WhatsApp and Facebook Messenger are common platforms for social media phishing_. One scam uses automation to generate an authentic-looking link to a video featuring the victim. The link uses the victim’s face and name, then asks a question like, “OMG! Is that really you?”. The link then leads to a download page that compromises the users’ device. ### 4\. Phone Number Port-Outs Cybercriminals can use automated bots to gather personal information on victims from a broad variety of online sources. _One of the newer mobile phishing scams that hackers are now attempting uses this information to try to “port out” a victim’s phone number to a new cell phone carrier._ This **phishing attack** is a sophisticated form of identity theft and is usually performed with a specific goal in mind. Cybercriminals, financial fraudsters, and even drug dealers will use these ported out phone numbers for specific periods, sometimes as short as a few hours, and then disappear, leaving the victim to deal with the repercussions. In most cases, victims only have a few hours to solve this problem. _If your phone suddenly stops responding to basic functions like calling and texting, it might have been ported out._ ### 5\. Mobile Phone Cloning One of the biggest security flaws in the global telecommunications network is one that professionals have known about for decades. The global telecommunications protocol system known as **Signaling System 7** (SS7) has been around since 1975\. This is the system responsible for sending SMS messages around the world, and it is [completely unsecured](https://www.wired.com/2017/05/fix-ss7-two-factor-authentication-bank-accounts/). _SS7 is a private protocol network that is simultaneously managed by every telecom provider on the planet._ There is no single authority who can come along and say, “fix this now,” and as a result, it remains unfixed. This vulnerability helps answer the question, [what can someone do with your phone number](https://coveron.com/blog/what-can-someone-do-with-your-phone-number/). _A cybercriminal with access SS7 can clone your phone number, read your text messages, or send new texts from your number with impunity._ The phishing element comes into play when organizations use SMS for **dual-factor authentication**. If you have to verify a password or approve a bank transaction with an SMS, there is a chance that the message gets intercepted on its way through the unsecured SS7 network. [![cybersecurity](https://media.mailhop.org/duocircle/images/2019/08/email-smtp-service-8654.jpg)](https://media.mailhop.org/duocircle/images/2019/08/email-smtp-service-8654.jpg) ## What You Can Do to Secure Your Mobile Phone For individual mobile phone users, learning **cybersecurity best practices** and using trustworthy, high-impact security apps is critical. Users who overly rely on SMS dual-factor authentication or download games from unsecured sources are putting themselves at risk. Individual users don’t often find themselves victimized by highly advanced port-out schemes and SS7 exploits, but organizations do. When used alongside more traditional tactics like voice phishing, it’s possible to impersonate high-authority executives in an organization and demand sensitive data from employees, for example. Under these conditions, organizations need to develop comprehensive cybersecurity policies that include **Bring-Your-Own-Device** (BYOD) coverage and [phishing protection](/email/phishing-protection). This is true even if the company requires employees to use company devices. A security chain is only as strong as its weakest link, and there are more links in today’s security environment than ever before. ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) Brad Slavin General Manager General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio. ## Secure your email infrastructure Protect, authenticate, and deliver. Contact our team to find the right solution. [Contact Sales](/contact/) [Explore Products](/products/) Share this article [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fphishing-protection%2Fmobile-hacking-on-the-rise-alongside-new-phishing-tactics%2F) [ ](https://twitter.com/intent/tweet?text=Mobile%20Hacking%20on%20the%20Rise%20Alongside%20New%20Phishing%20Tactics&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fphishing-protection%2Fmobile-hacking-on-the-rise-alongside-new-phishing-tactics%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fphishing-protection%2Fmobile-hacking-on-the-rise-alongside-new-phishing-tactics%2F) Copy Related Articles - [ ![AI-Generated Phishing](https://media.mailhop.org/duocircle/images/2026/04/spf-record-4522.jpg) AI-Generated Phishing Has Eliminated the Typo: Why Traditional Email Filters Are No Longer Enough Phishing ](/blog/ai-generated-phishing-eliminates-typos-making-traditional-email-filters-ineffective/) - [ ![spf-permerror-4555](https://media.mailhop.org/duocircle/images/2023/05/spf-permerror-4555.jpg) 10 Applications of ChatGPT that Hackers Are Already Exploiting Phishing ](/blog/phishing-protection/10-applications-of-chatgpt-that-hackers-are-already-exploiting/) - [ ![Email-Based Cyber-Attacks](https://media.mailhop.org/duocircle/images/2016/03/spf-record-tester-4455.jpg) 65% of Global Businesses Ill-Equipped to Defend Against Email-Based Cyber-Attacks Phishing ](/blog/phishing-protection/65-global-businesses-ill-equipped-defend-email-based-cyber-attacks/) - [ ![Email-based Ransomware Attacks](https://media.mailhop.org/duocircle/images/2018/02/email-smtp-service-7834.jpg) 7 Ways to Protect Your Organization from Email-based Ransomware Attacks Phishing ](/blog/phishing-protection/7-ways-protect-organization-email-based-ransomware-attacks/) ## Related Articles [ Phishing 11m AI-Generated Phishing Has Eliminated the Typo: Why Traditional Email Filters Are No Longer Enough Apr 28, 2026 ](/blog/ai-generated-phishing-eliminates-typos-making-traditional-email-filters-ineffective/)[ Phishing 5m 10 Applications of ChatGPT that Hackers Are Already Exploiting May 3, 2023 ](/blog/phishing-protection/10-applications-of-chatgpt-that-hackers-are-already-exploiting/)[ Phishing 4m 65% of Global Businesses Ill-Equipped to Defend Against Email-Based Cyber-Attacks Mar 29, 2016 ](/blog/phishing-protection/65-global-businesses-ill-equipped-defend-email-based-cyber-attacks/)[ Phishing 9m 7 Ways to Protect Your Organization from Email-based Ransomware Attacks Feb 11, 2018 ](/blog/phishing-protection/7-ways-protect-organization-email-based-ransomware-attacks/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"Mobile Hacking on the Rise Alongside New Phishing Tactics","description":"Mobile phishing is not a new phenomenon.","url":"https://www.duocircle.com/blog/phishing-protection/mobile-hacking-on-the-rise-alongside-new-phishing-tactics/","datePublished":"2019-08-31T18:27:00.000Z","dateModified":"2025-06-16T14:39:01.000Z","dateCreated":"2019-08-31T18:27:00.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/phishing-protection/mobile-hacking-on-the-rise-alongside-new-phishing-tactics/"},"articleSection":"phishing-protection","keywords":"","wordCount":1008,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2019/08/email-sending-services-9576.jpg","caption":"Mobile Hacking","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"Phishing"},{"@type":"ListItem","position":3,"name":"Mobile Hacking on the Rise Alongside New Phishing Tactics","item":"https://www.duocircle.com/blog/phishing-protection/mobile-hacking-on-the-rise-alongside-new-phishing-tactics/"}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"Phishing","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Mobile Hacking on the Rise Alongside New Phishing Tactics","item":"https://www.duocircle.com/blog/phishing-protection/mobile-hacking-on-the-rise-alongside-new-phishing-tactics/"}]} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"Mobile Hacking on the Rise Alongside New Phishing Tactics","description":"Mobile phishing is not a new phenomenon.","url":"https://www.duocircle.com/blog/phishing-protection/mobile-hacking-on-the-rise-alongside-new-phishing-tactics/","datePublished":"2019-08-31T18:27:00.000Z","dateModified":"2025-06-16T14:39:01.000Z","dateCreated":"2019-08-31T18:27:00.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/phishing-protection/mobile-hacking-on-the-rise-alongside-new-phishing-tactics/"},"articleSection":"phishing-protection","keywords":"","wordCount":1008,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2019/08/email-sending-services-9576.jpg","caption":"Mobile Hacking","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ```