:

CANADA ARRESTS THREE FOR SMS BLASTER PHISHING SCAM

INDUSTRY DESK1 MIN READ
MON, APR 27, 2026

■ AI-SUMMARIZED FROM 2 SOURCES ▸ TIMELINE

Canadian authorities arrested three men in Toronto for operating an SMS blaster device that mimics cellular towers to send phishing texts to nearby phones.

The device, designed to impersonate a cellular tower, targeted unsuspecting users by broadcasting fraudulent text messages. The technology exploits the way mobile phones connect to networks, intercepting communications and sending deceptive SMS messages that typically direct victims to malicious websites or prompt them to disclose sensitive information. SMS blasters represent an escalating threat in mobile security. The devices, also called IMSI catchers or Stingrays, operate by forcing nearby phones to connect to them rather than legitimate towers, giving operators access to communications and location data. The arrests mark a significant enforcement action against this type of cybercrime in Canada. Authorities did not disclose additional details about the scope of the operation or number of victims affected. The case underscores growing concerns about mobile infrastructure vulnerabilities and the need for stronger protections against cellular-based attacks.

■ SOURCES

Bleeping ComputerHacker News

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

A 68-year-old has been sentenced to over six years in prison in the U.K. for operating an illegal IPTV service that generated £980,812 ($1.3 million) over three years.

1H AGOIndustry Desk

A detailed analysis examines how the internet has shifted toward predatory practices, drawing significant engagement from tech community members on Hacker News with 227 points and 120 comments.

2H AGOIndustry Desk

A critical vulnerability in the popular GiveWP WordPress donation plugin allows unauthenticated attackers to execute arbitrary commands on hosting servers. The maximum-severity flaw requires immediate patching.

2H AGOSecurity Desk

Over 8,300 internet-facing Gitea instances remain unpatched against a critical vulnerability being actively exploited in remote code execution attacks, according to Shadowserver.

3H AGOIndustry Desk

■ SUBSCRIBE TO THE DAILY BRIEF

ONE EMAIL, 5 STORIES, 06:00 UTC. UNSUBSCRIBE ANYTIME.