I.0039Indicator
Clicks links in SMS messages from unknown senders or as part of SMS phishing simulation
Taps links in texts from unknown senders, risking credential capture, device exploitation, or hijacking.
Classification
- Risk domain One of 9 areas of human risk, from social engineering to readiness and response. Every signal belongs to one.
- Category
- Evidence level
- Maturity practices One capability a program performs, scored on its own: See, Understand, Act, Prove, Govern and Culture.
- Mappings
-
Indicators carry no mappings of their own; the signals in the same risk domain do.
Related signals (same domain, dimension and polarity)
10- Clicks simulated phishing links SE-B-01
- Submits credentials to simulations SE-B-02
- Opens simulated attachments SE-B-03
- Clicks links in real phishing SE-B-04
- Deceived by voice simulations SE-B-05
- Clicks SMS simulations SE-B-06
- Scans simulated QR codes SE-B-07
- Repeat clicker (3+ in 180 days) SE-B-08
- Replies to or engages with suspicious senders SE-B-09
- Grants remote access to an unverified party SE-B-18
"Clicks links in SMS messages from unknown senders or as part of SMS phishing simulation" (I.0039), Human Risk Management Framework v2.0.0, Living Security, CC BY 4.0. https://www.humanriskmanagement.com/taxonomy/indicators/i-0039-clicks-links-in-sms-messages-from-unknown-senders-or-as-part-of-sms-phish
Part of the open HRM Taxonomy, CC BY 4.0. Download the taxonomy as JSON · What's new in 2.0.
The initial assessment
Find your level.Then fix what matters.
18 questions, about 4 minutes and nothing to type before the result: your level, a score for each practice and three first playbooks, each Easy, Medium or Hard.