SMS traffic pumping fraud
Can someone explain this attack a bit clearer please?If my server is sending a 2FA to a mobile number, then I control the number and the content of the message, so how does the attacker send to blocks of numbers and profit from the traffic (I'm guessing they need to put a link in the message?)Does it only happen with poorly written forms that have no validation so the attacker can control the target number and the message that gets sent?