Millions of T-Mobile customers warned over new security threat – what to do if you get group text

T-MOBILE USERS are being warned about an ongoing phishing scam that utilizes text messages.

Hackers are targeting T-mobile customers with fraudulent SMS messages, the New Jersey Cybersecurity & Communications Integration Cell (NJCCIC) said on Friday.

GettyT-Mobile users are being warned about an ongoing phishing scam that utilizes text messages.[/caption]

The texts, which are sent as group messages, contain malicious links and are unblockable.

First, the texts thank the recipients for paying their T-Mobile bill and then direct them to open a malware-laden link that promises a gift.

“The messages vary but typically thank the recipient for paying their bill and offer a gift. The messages include a link to accept the gift,” the NJCCIC explained.

“These links may lead to malicious websites intending to steal account credentials or personal information, or install malware.”

A number of random recipients were included in the group chats, which would inundate users with the scam text messages over and over.

“Customers were unable to block the unwanted messages since they were sent via group text,” the NJCCIC said.

The organization also noted that T-Mobile users were likely targeted due to past breaches that “exposed various types of sensitive information.”

Since 2018, T-Mobile has suffered from several data breaches that infiltrated customers’ sensitive data, such as email addresses and phone call history.

A similar SMS scam was also recently overtaking Verizon customers, though that campaign utilized spoofing.

Spoofing is a scam in which threat actors camouflage themselves as a known, trusted source to try to obtain financial details and/or sensitive information.

What you can do to mitigate the risk of a phishing scam

If you receive an SMS message of this nature, it doesn’t mean that your phone number has been compromised, so don’t panic.

You can respond with a few options: Delete the text, forward it to SPAM (7726), or file a complaint with the FCC.

Experts advise to never click on any links attached to texts from unknown or suspicious senders.

“Additionally, [users should] refrain from providing sensitive information to unverified websites,” the NJCCIC added.