We are pleased to announce the launch of Advanced Phishing Protection for Lithium SMSC, a powerful new security enhancement designed specifically to combat the growing threat of SMS-based phishing attacks. This new capability builds on our commitment to providing robust security solutions for mobile operators and enterprises.
Rising Threats in SMS Communications#
SMS phishing (smishing) attacks have increased dramatically over the past year, with fraudsters using increasingly sophisticated techniques to target mobile users. These attacks typically include malicious URLs disguised as legitimate links, leading unsuspecting users to counterfeit websites designed to steal credentials and personal information.
Comprehensive Phishing Detection#
Our new Advanced Phishing Protection provides multiple layers of defence:
- Real-time URL Analysis: Automatically scans and analyses all URLs contained in SMS messages
- Comprehensive Phishing Database: Access to continuously updated databases of known phishing URLs
- Heuristic Detection: Identifies suspicious URL patterns that may indicate new phishing attempts *
- Automated Marking: Tags potentially dangerous messages with customisable warning labels *
Key Benefits#
- Enhanced User Protection: Shield subscribers from sophisticated phishing attacks
- Reduced Fraud Losses: Prevent credential theft and subsequent fraudulent activities
- Brand Protection: Safeguard your organisation’s reputation by preventing brand impersonation
- Regulatory Compliance: Help meet requirements for protecting consumer data and privacy
- Operational Efficiency: Automatic detection reduces manual security monitoring efforts
Implementation Highlights#
The Advanced Phishing Protection is remarkably straightforward to implement:
- Simple Configuration: Quick setup through the MGR user interface
- Flexible Deployment: Support for both online and offline phishing database updates
- Customisable Responses: Configure specific actions for detected phishing attempts
- Detailed Logging: Comprehensive audit trails for security monitoring
Technical Framework#
The Advanced Phishing Protection utilises a sophisticated scripting engine to perform several critical functions:
- URL Extraction: Identifies and isolates URLs embedded in SMS messages
- Database Comparison: Checks extracted URLs against known phishing databases
- Pattern Analysis: Evaluates URLs for suspicious patterns and obfuscation techniques *
- Action Application: Applies predetermined actions to messages containing suspected phishing links *
Easy Setup Process#
Setting up Advanced Phishing Protection is simple:
- Configure Filter: Create a new script-based filter in the MGR Advanced Filters section
- Implement Script: Deploy the phishing detection script to your FAF nodes
- Create Routing Rules: Ensure proper message routing through the filter
- Activate Protection: Enable the filter and begin protecting your users immediately
Performance & Scalability#
The Advanced Phishing Protection feature has been engineered for minimal impact on message processing times while maintaining scalability for high-volume environments:
- Low Latency: Typically less than 5ms additional processing time per message
- High Throughput: Tested at over 3,000 messages per second per node
- Efficient Processing: Optimised for minimal resource utilisation
Industry Impact#
SMS phishing has become one of the most prevalent attack vectors for mobile users:
- According to IBM, phishing was one of the top attack vectors in cybercrime at 16%.
- 47% of mobile users in average have received a phishing SMS in the past six months
- Over 60% of consumers report decreased trust in organisations after experiencing SMS-based fraud
Our Advanced Phishing Protection directly addresses these challenges, providing carriers and enterprises with the tools they need to protect their users and maintain trust.
Availability#
Advanced Phishing Protection is available now as part of Lithium version 24.03.11. Existing customers can implement this feature by upgrading to the latest release.
As SMS phishing attacks continue to evolve in sophistication, our Advanced Phishing Protection represents an important step in safeguarding mobile communications. By implementing this solution, operators can provide their subscribers with peace of mind while protecting their own brands and reputation.
For more information about implementing Advanced Phishing Protection or upgrading to the latest version of Lithium, please contact your account manager or our support team.
Note#
* - These features have limited availability and require hardware to run AI models locally or connection to the hosted models.