Canadian Police Bust SMS Blaster Scam Exploiting 2G Flaw to Steal Bank Credentials

An SMS Blaster is a text-message broadcasting device that can impersonate a legitimate cell tower, force phones to downgrade to the less secure 2G network and send phishing messages posing as banks at scale. The messages trick users into surrendering credentials such as usernames and passwords. The case highlights how legacy mobile communications protocols can still provide an entry point for financial fraud.

The Toronto Police Service released the findings of its Project Lighthouse investigation, which uncovered a criminal group using an SMS Blaster to carry out attacks. Tens of thousands of mobile devices were affected within several months, with more than 10 million network disruptions recorded. The available event information does not specify the date of the police announcement, the number of devices seized, the number of victims or the amount of actual financial losses.