{"id":92160,"date":"2018-10-24T09:00:38","date_gmt":"2018-10-24T16:00:38","guid":{"rendered":"https:\/\/securingtomorrow.mcafee.com\/?p=92160"},"modified":"2025-07-31T23:06:52","modified_gmt":"2025-08-01T06:06:52","slug":"android-timpdoor-smishing-scam","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/mobile-security\/android-timpdoor-smishing-scam\/","title":{"rendered":"How to Squash the Android\/TimpDoor SMiShing Scam"},"content":{"rendered":"

As technology becomes more advanced, so do cybercriminals\u2019 strategies for gaining access to our personal information. And while phishing scams<\/a> have been around for over two decades<\/a>, attackers have adapted their methods to \u201cbait\u201d victims through a variety of platforms. In fact, we\u2019re seeing a rise in the popularity of phishing via SMS messages, or SMiShing. Just recently, the McAfee Mobile Research team discovered active SMiShing campaigns that are tricking users into downloading fake voice-messaging apps, called Android\/TimpDoor.<\/p>\n

So how does Android\/TimpDoor infect a user\u2019s device? When a victim receives the malicious text, the content will include a link. If they click on it, they\u2019ll be directed to a fake web page. The website will then prompt the victim to download the app in order to listen to phony voice messages. Once the app has been downloaded, the malware collects the device information including device ID, brand, model, OS version, mobile carrier, connection type, and public\/local IP address. TimpDoor allows cybercriminals to use the infected device as a digital intermediary without the user\u2019s knowledge. Essentially, it creates a backdoor for hackers to access users\u2019 home networks.<\/p>\n

According to our team\u2019s research, these fake apps<\/a> have infected at least 5,000 devices in the U.S. since the end of March. So, the next question is what can users do to defend themselves from these attacks? Check out the following tips to stay alert and protect yourself from SMS phishing:<\/p>\n