modems

that-annoying-sms-phish-you-just-got-may-have-come-from-a-box-like-this

That annoying SMS phish you just got may have come from a box like this

Scammers have been abusing unsecured cellular routers used in industrial settings to blast SMS-based phishing messages in campaigns that have been ongoing since 2023, researchers said.

The routers, manufactured by China-based Milesight IoT Co., Ltd., are rugged Internet of Things devices that use cellular networks to connect traffic lights, electric power meters, and other sorts of remote industrial devices to central hubs. They come equipped with SIM cards that work with 3G/4G/5G cellular networks and can be controlled by text message, Python scripts, and web interfaces.

An unsophisticated, yet effective, delivery vector

Security company Sekoia on Tuesday said that an analysis of “suspicious network traces” detected in its honeypots led to the discovery of a cellular router being abused to send SMS messages with phishing URLs. As company researchers investigated further, they identified more than 18,000 such routers accessible on the Internet, with at least 572 of them allowing free access to programming interfaces to anyone who took the time to look for them. The vast majority of the routers were running firmware versions that were more than three years out of date and had known vulnerabilities.

The researchers sent requests to the unauthenticated APIs that returned the contents of the routers’ SMS inboxes and outboxes. The contents revealed a series of campaigns dating back to October 2023 for “smishing”—a common term for SMS-based phishing. The fraudulent text messages were directed at phone numbers located in an array of countries, primarily Sweden, Belgium, and Italy. The messages instructed recipients to log in to various accounts, often related to government services, to verify the person’s identity. Links in the messages sent recipients to fraudulent websites that collected their credentials.

“In the case under analysis, the smishing campaigns appear to have been conducted through the exploitation of vulnerable cellular routers—a relatively unsophisticated, yet effective, delivery vector,” Sekoia researchers Jeremy Scion and Marc N. wrote. “These devices are particularly appealing to threat actors, as they enable decentralized SMS distribution across multiple countries, complicating both detection and takedown efforts.”

That annoying SMS phish you just got may have come from a box like this Read More »

aol-announces-september-shutdown-for-dial-up-internet-access

AOL announces September shutdown for dial-up Internet access

A screenshot of America Online's version 2.5 client in 1995.

A screenshot of America Online’s version 2.5 client in 1995.

The company’s cultural impact extended far beyond mere connectivity. AOL Instant Messenger introduced many users to real-time digital communication. Chat rooms created some of the Internet’s first social networks. The famous “You’ve Got Mail” notification became so iconic that it was a title for a 1998 romantic comedy. For better or worse, AOL keywords trained a generation to navigate the web through corporate-curated portals rather than open searching.

Over the years, Ars Technica documented numerous dial-up developments and disasters that plagued AOL users. In 2015, 83-year-old Ron Dorff received phone bills totaling $24,298.93 after his AOL modem started dialing a long-distance number instead of a local access point—a problem that had plagued users since at least 2002, when New York’s attorney general received more than 50 complaints about similar billing disasters.

The financial risks weren’t limited to technical mishaps: AOL itself contributed to user frustration by repeatedly adjusting its pricing strategy. In 2006, the company raised dial-up rates to $25.90 per month—the same price as broadband—in an attempt to push users toward faster connections. This followed years of subscriber losses that saw AOL’s user base fall over time as the company struggled with conflicting strategies that included launching a $9.95 Netscape-branded service in 2003 while maintaining premium pricing for its main offering.

The infrastructure that remains

AOL’s shutdown doesn’t mean dial-up is completely dead. Several niche providers like NetZero, Juno, and Dialup 4 Less continue to offer dial-up services, particularly in areas where it remains the only option. In the past, some maintained dial-up connections as a backup connection for emergencies, though many still use it for specific tasks that don’t require high bandwidth, like processing credit card payments.

The Public Switched Telephone Network that carries dial-up signals still exists, though telephone companies increasingly route calls through modern packet-switched networks rather than traditional circuit-switched systems. As long as traditional phone service exists, dial-up remains technically possible—just increasingly impractical as the web grows more demanding.

For AOL, maintaining dial-up service likely became more about serving a dwindling but dependent user base than generating meaningful revenue. The infrastructure requirements, customer support needs, and technical maintenance for such a legacy system eventually outweigh the benefits.

The September 30 shutdown date gives remaining dial-up users just over one month now to find alternative Internet access—a challenge for those in areas where alternatives don’t exist. Some may switch to satellite or cellular services despite higher costs. Others may lose Internet access entirely, further widening the digital divide that dial-up, for all its limitations, helped bridge for three decades.

This article was updated on August 12, 2025 at 10: 45 AM Eastern to add details about when AOL began offering true Internet access.

AOL announces September shutdown for dial-up Internet access Read More »