Google messages adds shield against sms blaster phishing attacks
Google Messages is bolstering its defenses against a new type of scam targeting Android users: SMS Blasters. These devices can hijack your phone's connection, downgrading it to a vulnerable 2G network to inject malicious text messages.
New code hints at incoming protection
The security upgrade, reportedly spotted in a beta build of Google Messages version 20260306, includes code specifically designed to address SMS Blaster threats. The code, labeled enable_sms_blaster_protection, suggests a dedicated feature is on the horizon to mitigate this emerging risk.
SMS Blasters operate by impersonating cell towers, forcing nearby devices to connect to them. This often happens within seconds, allowing attackers to downgrade connections to 2G – a network easier to compromise than 4G or 5G. Once connected, the blaster can send fraudulent texts, with reports of over 100,000 messages per hour being sent in a single instance in Bangkok.
The problem lies in the fact that the 2G connection bypasses spam filters in apps like Google Messages, making it easier for phishing scams to reach their targets. Currently, Google Messages employs Scam Detection, an on-device AI system aimed at identifying fraudulent calls and messages. However, the effectiveness of this Technology against SMS Blasters remains to be seen.
Until a dedicated feature rolls out, users are advised to disable 2G mode on their phones. Alternatively, enabling Advanced Protection Mode on Android or Lockdown Mode on iOS will automatically disable 2G connections. These measures, while preventative, highlight the evolving sophistication of mobile threats.
The speed at which these attacks can occur – a few seconds from connection to message delivery – underscores the urgency of a dedicated defense. The potential for widespread disruption and data theft makes this a serious concern for anyone relying on SMS communication. The rollout of the enable_sms_blaster_protection feature could prove a vital step in safeguarding users from this increasingly prevalent form of cybercrime.