---
title: SMS Attacks | Guardsquare
description: Learn about common SMS attacks and discover their impact on mobile app security. Learn how to protect against SMS attacks using MFA today.
---

[![guardsquare-logo](https://insights.guardsquare.com/hs-fs/hubfs/Logos/logo-white.png?length=536&name=logo-white.png "guardsquare-logo") ](https://23593082.hs-sites.com/)

- pricing

[Request Pricing](https://www.guardsquare.com/request-pricing?hsCtaTracking=646b0379-d596-4b1a-8526-2ccbdbb0f81b%7Ce8809087-a83f-4476-8b22-34b9572013fd)

[Login](https://customers.guardsquare.com/login?utm_referrer=https%3A%2F%2Fwww.guardsquare.com%2F)

En

- [中文](https://www.guardsquare.com/zh-hans)
- [한국어](https://www.guardsquare.com/ko)
- [Português](https://www.guardsquare.com/pt-br)
- [Español](https://www.guardsquare.com/es)

# [Mobile Application]

# Security Research Center

 Table of contents

# SMS attacks

Malware can capture the contents of SMS messages, for example, to perform a malicious multi-factor authentication.

The malware typically requests permissions that may seem legitimate in the context of the app, but are actually intended to access SMS messages. For example, a fake messaging app might logically request access to SMS.

With the necessary permissions, the malware can intercept incoming SMS messages. This is particularly concerning for messages containing MFA codes, which are used as a second layer of security beyond passwords. The malware can programmatically read these messages and extract sensitive information like MFA codes without the user's knowledge.

## Defense techniques overview

 --- title: Malware clipboard attacks --- graph TD all[All malware attacks] --> steal_sms click all href "https://23593082.hs-sites.com/knowledgebasetest/malware/overview" "Malware overview" steal_sms[Spy on users' SMS messages] steal_sms --> mfa([2FA/MFA ⭐]) style mfa fill:lightgreen click mfa href "https://23593082.hs-sites.com/knowledgebasetest/defense/mfa" "Multi factor authentication"

## Recommended defense tactics

We recommend using [multi-factor authentication](https://23593082.hs-sites.com/knowledgebasetest/defense/mfa).

## [Guardsquare](https://23593082.hs-sites.com/knowledgebasetest/author/guardsquare)

Connect with the author

** Table of contents **

![HubSpot CMS](https://cdn2.hubspot.net/hubfs/302335/hubspot-cms-logo-gray.svg "HubSpot CMS")

[General Terms](https://23593082.hs-sites.com/terms-of-use) | [Privacy Policy](https://23593082.hs-sites.com/privacy-policy) | [Cookie Policy](https://23593082.hs-sites.com/cookie-policy)

Tervuursevest 362 bus 1, 3000 Leuven, Belgium | VAT: BE0550675829 |

© 2016-2026 Guardsquare nv. All rights reserved.

<https://www.facebook.com/guardsquare> <https://twitter.com/Guardsquare> <https://www.linkedin.com/company/guardsquare/> <https://www.youtube.com/channel/UCP9s5F1ksT1E-7vSF2CDyhw> <https://github.com/Guardsquare>

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Guardsquare",
    "url" : "https://23593082.hs-sites.com/knowledgebasetest/author/guardsquare"
  },
  "dateModified" : "2024-02-28T02:47:29.912Z",
  "datePublished" : "2024-02-13T18:56:12.000Z",
  "headline" : "SMS Attacks | Guardsquare",
  "mainEntityOfPage" : {
    "@id" : "https://23593082.hs-sites.com/knowledgebasetest/attacks/sms-attacks",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject"
    }
  }
}
```