SlowMist CISO: Beware of SMS phishing attacks on Binance users and recommend that Binance officials thoroughly investigate the issue

Odaily Planet Daily News According to a warning issued by SlowMist CISO 23pd on the X platform, "Be careful, the latest SMS phishing attack against Binance users has appeared. Recently, two people received the same phishing SMS on the same day, and the phishing SMS actually appeared in the conversation thread of Binance's official SMS, and appeared in the same context as the previous official SMS, sharing the same channel. What's more surprising is that the time span is quite large, and the official SMS environment is accurately forged. The possible explanation is that the SMS channel was used or hijacked by phishers. The first SMS did come from the official number, but then a fraudulent SMS was received, which may indicate: 1. Fraudsters forged the official SMS source (SMS Spoofing) • They forged the SMS sending number through technical means to make it look the same as the official number, so that the phishing SMS is mixed into the official conversation thread. 2. They exploit SMS gateway vulnerabilities or supply chain attacks • Fraudsters may have attacked the SMS gateway, or exploited the security vulnerabilities of operators/third-party SMS service providers to successfully embed phishing SMS into the official channel. • There may even be bad SMS suppliers cooperating to directly forge official SMS replies, making it difficult for users to distinguish the authenticity. Please ask Binance officials to check the problem, and at the same time, please raise your safety awareness and pay attention to the safety of funds. ”