Smishing Campaigns

Overview

PhishingBox offers the ability to send out simulated phishing text messages. These are called "smishing campaigns". 

Requirements

• Smishing Feature turned on (reach out to support)
• Active Twilio Integration
• Targets with defined 'Mobile' field

To create a smishing campaign, your account must have the smishing feature and an active Twilio integration (see our Setting up the Twilio Integration article). After successfully configuring a Twilio integration on your account, the Twilio integration card will be lit up as active on the Integration Store page (Administration > Integration Store). 

Creating a Campaign

With an active Twilio integration, the first step in the Campaign Wizard will include an option to create a smishing campaign:

In the Schedule tab, you will be required to turn on the "Verify Opt-In" toggle. This verifies that you are authorized by the owners of the phone numbers included in this test to opt these phone numbers in to receiving text messages from our platform.

WARNING: Fines for opting in phone numbers that you are not authorized to opt in can be anywhere from $500-$1500.

After you select a group, the number of targets with valid phone numbers will appear below the word 'Group(s)'. If there are 3 targets in the group, and only 1 has a valid phone number, then it will show 1/3, as shown below:

NOTE: The 'Mobile' field in Edit Target is where a targets phone number will need to be defined. Only provide digits in this field. 

On the Templates tab, you can pick the templates to include in the smishing campaign. Smishing templates cannot be customized. You may only use the pre-designed smishing templates available from the library.

Back to top