Phishing utilizing SMS messages or SMShing is an increasingly common technique used in European countries. Many users are very aware that they should not trust all incoming email messages and thus it might be desirable for a pentester to try and take a different approach. To meet this need, the King Phisher project now includes simple instructions on how to send SMS messages as part of a campaign. The instructions can be found on the SMS Phishing page in the wiki
This feature as documented, leverages the Clockwork SMS service which provides an SMS to email gateway. The standard CSV targets list for use with King Phisher just needs to have the phone number formatted with the Clockwork API key in place of an email address. Using this service, SMS messages can be sent as emails with King Phisher for a (at the time of this writing) reasonable $0.07 per message.
Happy SMShing!
