Twilio Phishing Attack Exposes Weaknesses of SMS

Twilio, a telecom giant with more than 150,000 corporate customers, reported that a targeted phishing campaign successfully allowed hackers to access some of their customer data. On August 4, a well-organized attacker used stolen corporate login credentials to access the data of 125 corporate customers, Twilio explained in a blog article describing the incident. The attacker sent numerous text messages to current and former employees posing as the company’s IT department.