Police arrest SMS blaster team that sent malicious messages to thousands in Toronto

An SMS blaster is a device that simulates being a mobile phone tower and can send text messages directly to phones within its range, bypassing telecom operators entirely. The technology, relatively accessible in unregulated markets, is used for mass phishing attacks: the messages arrive without spam filters, appear in the conversation thread of the real number of banks or other institutions, and have much higher open rates than conventional phishing emails.

The Toronto case is notable for being the first documented in Canada, but the technique has been recorded in several European and Asian countries. Groups that use it tend to be criminal organisations with some technical sophistication, capable of acquiring or assembling the equipment and moving it quickly to avoid detection.

The arrest of the team means Canadian police now have physical evidence of the device and the modus operandi, which may accelerate the development of technical and legal countermeasures. For citizens, the practical advice remains the same: do not click on links from unsolicited messages even if they appear to come from known institutions.