THAT ANNOYING SMS PHISH YOU JUST GOT MAY HAVE COME FROM A BOX LIKE THIS

Summary from the TLDR InfoSec newsletter

Criminals have been utilizing vulnerable industrial cellular routers to mass-send SMS phishing attacks ("smishing") since 2023. Security researchers found over 18,000 of these devices, easily accessible due to outdated firmware. These routers, mainly used for industrial purposes, help spread phishing links across countries by exploiting weak security or misconfigurations, making detection and shutdown difficult.