Bidda Sovereign Intelligence · 10,085 Verified Nodes · 39 Sovereign Pillars

MITRE ATT&CK T1496.003: SMS Pumping (Enterprise Tactic TA0040 - Impact)

MITRE ATT&CK T1496.003 (SMS Pumping) is an Enterprise Impact sub-technique of T1496 (Resource Hijacking). Adversaries may leverage messaging services for…

What MITRE ATT&CK T1496.003: SMS Pumping (Enterprise Tactic TA0040 - Impact) requires

MITRE ATT&CK T1496.003 (SMS Pumping) is an Enterprise Impact sub-technique of T1496 (Resource Hijacking). Adversaries may leverage messaging services for SMS pumping, which may impact system and/or hosted service availability. SMS pumping is a type of telecommunications fraud whereby a threat actor first obtains a set of phone numbers from a telecommunications provider, then leverages a victim's messaging infrastructure to send large amounts of SMS messages to numbers in that set. By generating SMS traffic to their phone number set, a threat actor may earn payments from the telecommunications provider. Affected platforms: SaaS. MITRE-documented mitigations include M1013 Application Developer Guidance. The Center for Threat-Informed Defense maps this technique to NIST SP 800-53 Rev 5 controls SC-05.

Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:

Primary source: https://attack.mitre.org/techniques/T1496/003/

SHA-256 integrity: 0e09d37b64c0628fcabcc963145bf4049be0a91e78d9de9da896a62a4e98c524

Primary Citations — 7 traced to source

  • MITRE ATT&CK Technique T1496.003: SMS Pumping (https://attack.mitre.org/techniques/T1496/003/)
  • MITRE ATT&CK Tactic TA0040: Impact (https://attack.mitre.org/tactics/TA0040/)

+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.

Access

⚠ Important: Human Verification Required

Bidda compliance nodes are reference intelligence, not legal advice. Every node must be reviewed by a qualified compliance professional or legal counsel before implementation in any enterprise workflow, regulated system, or compliance programme. See bidda.com/disclaimer for full terms.