SMS PVA Part 2: Underground Service for Cybercriminals


In part one, Trend Micro researchers extensively discussed SMS PVA and started investigating a particular service called ReceiveCode that our team first found on a Facebook advertisement.

ReceiveCode offers users access to SMS code verification sent to mobile numbers that the company has in their storage. Customers simply need to sign up to their customer-facing portal, smspva.net, to start using their services.

In this article, they’ll discuss how smspva.net and Android SMS interception works hand in hand. We’ll also illustrate an example of how users can use smspva.net to get an SMS verification code without using their own mobile number.

Read more…
Source: Trend Micro

Related story: SMS PVA Services’ Use of Infected Android Phones Reveals Flaws in SMS Verification