--- title: "Attackers Are Getting Smarter: What You Need To Know About Smishing and Vishing" description: We dive into common types of smishing, vishing, and whaling attacks, and we offer suggestions to protect your organization from savvy online attackers. image: https://shardsecure.com/hubfs/Concept%20of%20sending%20e-mails%20from%20your%20computer.jpeg --- - [Home](https://shardsecure.com/) - [Blog](https://shardsecure.com/blog) # Attackers Are Getting Smarter: What You Need To Know About Smishing and Vishing Alex Ryan December 14 2022 ![](https://shardsecure.com/hubfs/Concept%20of%20sending%20e-mails%20from%20your%20computer.jpeg) Attackers Are Getting Smarter: What You Need To Know About Smishing and Vishing Phishing attacks have been around for years, but attackers are getting smarter. They’re now using new methods like smishing and vishing to try and steal your information. In this blog post, we'll discuss what these attacks are, how they work, and what you can do to protect yourself. We'll also talk about whaling, a more sophisticated type of phishing attack that targets high-value individuals and organizations.  ## What is smishing?  Smishing is a type of phishing attack that uses SMS text messages to trick victims into giving up personal information or downloading malware. The attacker will usually pose as a legitimate organization like a bank or government agency and send an official-looking text message. This message will often include a sense of urgency, such as a request to update your account information by a certain deadline or a warning about suspicious activity. If you click on the link in the text message, you'll be taken to a fake website that looks identical to the real thing. Once you enter your personal information, the attacker will have access to your accounts.  ## What is vishing?  Vishing is another type of phishing attack, but instead of using text messages, the attacker will use Voice over IP (VoIP) technology to place a phone call. The caller will often pose as a legitimate organization and try to trick you into giving them personal information or downloading malware. They may also try to get you to transfer money to an account that they control.  ## What is whaling?  Whaling is a more sophisticated type of phishing attack that targets high-value individuals like C-suite executives. The attacker will send a personalized email to their target, often using information that they’ve gathered from social media or other public sources. For instance, the email might include details about the target’s job title or be engineered to look like it was sent by a friend, trusted business, or other legitimate source.  Whaling attacks may also include a sense of urgency, often alerting targets that there’s been suspicious activity on an account or that they need to update their information immediately. If the target clicks on the link in the email, they’ll be taken to a fake website that looks identical to the real thing. Once they enter their personal information, the attacker will have access to their account.   With so much information available online, whaling attacks can get very personal.  Attackers may know, for instance, that you have a Chase credit card and contact you pretending that they’re with Chase Bank’s fraud department and noticed some unusual activity on your account.   When you receive unsolicited inbound contact, the safest thing to do is get a reference or case number, then contact the company via the info on the company’s own website.  That way, you know you're talking to an authorized individual.  ### Our experience with reverse whaling  At ShardSecure, we’ve had a number of attempted whaling attacks recently. Yes, us specifically. These attacks have been a kind of reverse whaling, but over SMS. They go like this:  The attacker does research to find out information about us, including some names, phone numbers, and titles. They then target one of our employees over SMS and say, hey, this is your CEO, Bob Lam.  I’m in a meeting now and about to close a deal, but I need some gift cards and don't have time to explain.  Go to the nearest store, buy some gift cards, and send me the pics.  The company will reimburse you later, but I need these immediately — I’m sitting with the customers now.  Luckily, our team knows not to respond to this kind of message, but with these attacks becoming  more and more common, not all organizations are so lucky. (I mentioned our reverse whaling recently on a security forum and a bunch of people said they are seeing the same thing.)  ## How can you protect yourself from smishing and vishing attacks?  There are a few things you can do to protect yourself from smishing and vishing attacks. First, be suspicious of any text message or phone call that asks for personal information or financial information. If you're not expecting a call or message from the organization, don't respond.   Second, never click on links in text messages or emails unless you’re absolutely sure they’re legitimate. If you're unsure, you can always go to the organization’s website directly and contact them through another channel.   Finally, if you’re in a decision-making role in your organization, make sure you’re using advanced data protection measures. The right microsharding solution can protect against the impact of compromised credentials and make sensitive data unintelligible to unauthorized users. We explain how with [these](https://shardsecure.com/resources/briefs) [resources](https://shardsecure.com/resources/white-papers).  Keep these tips in mind, and you'll be better protected against smishing, vishing, and beyond.  [Cybersecurity](https://shardsecure.com/blog/tag/cybersecurity) [Cyberattacks](https://shardsecure.com/blog/tag/cyberattacks) ## Read on ![](https://shardsecure.com/hubfs/Picture2.jpg) June 15 2026 ### [ShardSecure MCP Secure Gateway](https://shardsecure.com/blog/shardsecure-mcp-secure-gateway-identity-aware-data-redaction-and-least-privilege-context-enrichment-for-ai-inference) [Read more](https://shardsecure.com/blog/shardsecure-mcp-secure-gateway-identity-aware-data-redaction-and-least-privilege-context-enrichment-for-ai-inference) ![](https://shardsecure.com/hubfs/Keyboard%20with%20high%20tech%20user%20map%20icons%20and%20symbols-1.jpeg) February 18 2026 | [Cloud](https://shardsecure.com/blog/tag/cloud) ### [Unstructured Data Left Exposed: A Cloud Breach That Should Worry Every Enterprise](https://shardsecure.com/blog/unstructured-data-left-exposed-a-cloud-breach-that-should-worry-every-enterprise) [Read more](https://shardsecure.com/blog/unstructured-data-left-exposed-a-cloud-breach-that-should-worry-every-enterprise) ![](https://shardsecure.com/hubfs/Keyboard%20with%20high%20tech%20user%20map%20icons%20and%20symbols-1.jpeg) November 12 2025 | [Cloud](https://shardsecure.com/blog/tag/cloud) ### [Can You Really Trust Hyperscalers with Your Data at Rest?](https://shardsecure.com/blog/can-you-really-trust-hyperscalers-with-your-data-at-rest) [Read more](https://shardsecure.com/blog/can-you-really-trust-hyperscalers-with-your-data-at-rest) ![](https://shardsecure.com/hubfs/AI-Generated%20Media/Images/Acronis%20and%20ShardSecure%20unveil%20a%20groundbreaking%20technology%20partnership%20set%20against%20a%20backdrop%20of%20a%20sleek%20modern%20office%20filled%20with%20digital%20screens%20displaying%20dynamic%20data%20flows%20The%20atmosphere%20buzzes%20with%20excitement%20and%20anticipation%20illuminated%20by%20sof-1.png) October 16 2025 | [Cloud](https://shardsecure.com/blog/tag/cloud) ### [Acronis + ShardSecure: Stronger data protection for modern threats](https://shardsecure.com/blog/acronis-shardsecure-stronger-data-protection-for-modern-threats) [Read more](https://shardsecure.com/blog/acronis-shardsecure-stronger-data-protection-for-modern-threats) ![](https://shardsecure.com/hubfs/AI-Generated%20Media/Images/The%20image%20portrays%20a%20hightech%20digital%20landscape%20filled%20with%20abstract%20representations%20of%20data%20security%20concepts%20At%20the%20forefront%20a%20glowing%20vault%20symbolizing%20advanced%20filelevel%20encryption%20stands%20tall%20surrounded%20by%20intricate%20patterns%20of%20fragmented%20data.png) October 1 2025 | [Data Sensitivity](https://shardsecure.com/blog/tag/data-sensitivity) ### [Revolutionizing Data Security: How Agentless File Level Encryption Makes Stolen Data Useless](https://shardsecure.com/blog/sensitive_data) [Read more](https://shardsecure.com/blog/sensitive_data) ![unstructured data](https://shardsecure.com/hubfs/Digital%20image%20of%20globe%20with%20conceptual%20icons.%20Globalization%20concept.jpeg) September 15 2025 | [Cybersecurity News](https://shardsecure.com/blog/tag/cybersecurity-news) ### [Elevating unstructured data security: ShardSecure® and Entrust® Join Forces!](https://shardsecure.com/blog/entrust_partnership) [Read more](https://shardsecure.com/blog/entrust_partnership) ![](https://shardsecure.com/hubfs/AI-Generated%20Media/Images/scales%20%20ransomware%20attack%20to%20pay%20the%20money%20or%20risk%20the%20attack.jpeg) July 29 2025 | [Ransomware](https://shardsecure.com/blog/tag/ransomware) ### [CISOs on Strategic Considerations in Ransomware Response](https://shardsecure.com/blog/ransomware-fine) [Read more](https://shardsecure.com/blog/ransomware-fine) ![](https://shardsecure.com/hubfs/AI-Generated%20Media/Images/Image%20for%20AI%20data%20types-1.jpeg) July 29 2025 | [Data security](https://shardsecure.com/blog/tag/data-security) ### [The Growth of AI is driving the Imperative of Securing Unstructured Data](https://shardsecure.com/blog/ai-unstructured-data) [Read more](https://shardsecure.com/blog/ai-unstructured-data) ![](https://shardsecure.com/hubfs/AI-Generated%20Media/Images/The%20image%20depicts%20a%20hightech%20digital%20landscape%20showcasing%20a%20sleek%20modern%20office%20environment%20illuminated%20by%20soft%20blue%20and%20white%20lighting%20In%20the%20foreground%20a%20large%20computer%20screen%20displays%20intricate%20graphs%20and%20charts%20related%20to%20data%20security%20while%20a%20gr.jpeg) July 22 2025 | [Data security](https://shardsecure.com/blog/tag/data-security) ### [How to make your SharePoint data of zero value in a zero day attack!](https://shardsecure.com/blog/sharepoint_breach) [Read more](https://shardsecure.com/blog/sharepoint_breach) [![ShardSecure®](https://shardsecure.com/hubfs/ShardSecure%20brand%20assets/Logo%20(2022)/ShardSecure-Logo__Horizontal--White.svg "ShardSecure®")](https://shardsecure.com/) 101 Avenue of the Americas, 9th Floor, New York, NY 10013, United States of America [![linkedin](https://shardsecure.com/hubfs/_2023/li.svg) ](https://www.linkedin.com/company/shardsecure) [![tweeter](https://shardsecure.com/hubfs/_2023/tweeter.svg) ](https://www.twitter.com/ShardSecure) [![facebook](https://shardsecure.com/hubfs/_2023/facebook.svg) ](https://www.facebook.com/ShardSecure/) [![facebook](https://shardsecure.com/hubfs/_2023/youtube.svg) ](https://www.youtube.com/@shardsecure877) © 2026 ShardSecure®. All rights reserved. [Privacy Policy](https://shardsecure.com/privacy-policy) ![websights](https://ws.zoominfo.com/pixel/62e7bb6d62a6b2008e071c83) ![](https://px.ads.linkedin.com/collect/?pid=5456580&fmt=gif) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Alex Ryan", "url" : "https://shardsecure.com/blog/author/alex-ryan" }, "dateModified" : "2022-12-20T22:00:17.732Z", "datePublished" : "2022-12-14T12:00:00.000Z", "headline" : "Attackers Are Getting Smarter: What You Need To Know About Smishing and Vishing", "image" : [ "https://shardsecure.com/hubfs/Concept%20of%20sending%20e-mails%20from%20your%20computer.jpeg" ], "mainEntityOfPage" : { "@id" : "https://shardsecure.com/blog/attackers-are-getting-smarter-smishing-vishing", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://shardsecure.com/hubfs/ShardSecure-Logo__Horizontal--Purple-Inverted.svg" }, "name" : "ShardSecure" } } ```