Adaptive Security

## What attack methods are included in SMS phishing simulations?

Adaptive's SMS phishing simulations can model a variety of attack techniques that real scammers use over text messages. For example, many smishing tests include a malicious link in the SMS (such as a shortened URL) and track whether users click it. Others might be interactive, asking the user to text back sensitive information (like "Reply with your PIN to verify") – this gauges if an employee would divulge data via text. Adaptive can also incorporate QR code attacks in SMS: the text might contain a QR code image or a link to one, enticing the user to scan it, which simulates how attackers trick users into visiting bad sites via QR. In multi-channel scenarios, an SMS might follow an email with a code. Essentially, Adaptive covers the main vectors: links to phishing sites, reply-to-phish attempts, and QR codes – all delivered through SMS. This provides well-rounded training on the various forms a mobile phishing attack might take.