Smishing

body { font-family: ‘Inter’, sans-serif; }
.chart-container { position: relative; width: 100%; max-width: 450px; margin-left: auto; margin-right: auto; height: 350px; max-height: 400px; }
@media (min-width: 768px) { .chart-container { height: 400px; } }
.nav-link { transition: color 0.3s, border-bottom-color 0.3s; }
.nav-link.active { color: #0284c7; border-bottom-color: #0284c7; }
.step-card.active { border-color: #0ea5e9; background-color: #f0f9ff; }
.disguise-tab.active { background-color: #0ea5e9; color: white; }
html { scroll-behavior: smooth; }

document.addEventListener(‘DOMContentLoaded’, () => {

// — Data for Interactive Elements —
const attackStepData = {
1: {
title: “Step 1: The Lure”,
content: “The attack begins with an unsolicited text message crafted to appear legitimate. It often creates urgency or curiosity with lures like fake delivery notifications, bank alerts, or prize winnings.”
},
2: {
title: “Step 2: The Hook”,
content: “The message contains a ‘hook’—usually a clickable link or a phone number. The link is often disguised using a URL shortener to hide its true, malicious destination. The goal is to provoke an immediate click.”
},
3: {
title: “Step 3: The Deception”,
content: “The link directs you to a fake website that mimics a real one (e.g., a bank login page). The professionally designed site tricks you into believing it’s authentic, prompting you to enter sensitive information.”
},
4: {
title: “Step 4: The Compromise”,
content: “Once you enter your details (password, PIN, credit card info), the attacker captures it, leading to account takeover or financial loss. Alternatively, the link might install malware directly onto your device.”
}
};

const disguiseData = {
delivery: {
title: “📦 Impersonating Delivery Services”,
example: ‘”Your package has a customs fee due. To schedule delivery, please pay here: [fake-delivery-link.com]”‘,
tactic: “Exploiting the rise of e-commerce, scammers use your anticipation for a package to steal payment information or install malware.”
},
bank: {
title: “🏦 Impersonating Banks”,
example: ‘”Security Alert: Suspicious activity on your account. Please verify your identity immediately to avoid suspension: [fake-bank-link.com]”‘,
tactic: “This tactic uses fear. Scammers create a fake emergency, knowing you want to protect your money, to rush you into giving up login credentials.”
},
gov: {
title: “🏛️ Impersonating Government Agencies”,
example: ‘”You have an outstanding tax refund of $542.31. To claim it, provide your details at: [fake-gov-link.com]”‘,
tactic: “These scams prey on respect for authority or hope for financial gain. Legitimate agencies rarely initiate contact via text to ask for personal info.”
},
retail: {
title: “🛍️ Impersonating Retailers”,
example: ‘”Congratulations! You’ve won a $100 gift card. Claim it now, supplies are limited: [fake-retail-link.com]”‘,
tactic: “This uses excitement and FOMO (fear of missing out). The offer is designed to steal personal information under the guise of a prize claim.”
},
utility: {
title: “💡 Impersonating Utility Companies”,
example: ‘”Your power will be disconnected in 30 minutes due to a late payment. Pay now to avoid interruption: [fake-utility-link.com]”‘,
tactic: “Similar to bank scams, this method uses fear of a major inconvenience to force a hasty, unverified payment to a fraudulent account.”
}
};

// — Navigation Scrolling and Active State —
const navLinks = document.querySelectorAll(‘.nav-link’);
const sections = document.querySelectorAll(‘main section’);

const observerOptions = { root: null, rootMargin: ‘0px’, threshold: 0.4 };
const observer = new IntersectionObserver((entries, observer) => {
entries.forEach(entry => {
if (entry.isIntersecting) {
navLinks.forEach(link => {
link.classList.toggle(‘active’, link.getAttribute(‘href’).split(‘#’)[1] === entry.target.id);
});
}
});
}, observerOptions);
sections.forEach(section => observer.observe(section));

// — Anatomy of an Attack Interaction —
const stepCards = document.querySelectorAll(‘.step-card’);
const stepDetailsContainer = document.getElementById(‘step-details’);

function updateStepDetails(step) {
stepCards.forEach(card => card.classList.remove(‘active’));
const activeCard = document.querySelector(`.step-card[data-step=”${step}”]`);
if (activeCard) activeCard.classList.add(‘active’);

const data = attackStepData[step];
stepDetailsContainer.innerHTML = `

`;
}

stepCards.forEach(card => {
card.addEventListener(‘click’, () => updateStepDetails(card.dataset.step));
});

// — Common Disguises Interaction —
const disguiseTabs = document.querySelectorAll(‘.disguise-tab’);
const disguiseContentContainer = document.getElementById(‘disguise-content’);

function updateDisguiseContent(disguise) {
disguiseTabs.forEach(tab => tab.classList.remove(‘active’, ‘bg-sky-600’, ‘text-white’));
const activeTab = document.querySelector(`.disguise-tab[data-disguise=”${disguise}”]`);
if(activeTab) activeTab.classList.add(‘active’);

const data = disguiseData[disguise];
disguiseContentContainer.innerHTML = `

${data.title}

${data.tactic}

`;
}

disguiseTabs.forEach(tab => {
tab.addEventListener(‘click’, () => updateDisguiseContent(tab.dataset.disguise));
});

// — Chart.js Doughnut Chart —
const ctx = document.getElementById(‘smishingChart’).getContext(‘2d’);
const smishingChart = new Chart(ctx, {
type: ‘doughnut’,
data: {
labels: [‘Delivery Scams’, ‘Bank Alerts’, ‘Retail/Prize Scams’, ‘Government Impersonation’, ‘Other’],
datasets: [{
label: ‘Smishing Themes’,
data: [35, 30, 15, 10, 10],
backgroundColor: [‘#0ea5e9’, ‘#38bdf8’, ‘#7dd3fc’, ‘#bae6fd’, ‘#e0f2fe’],
borderColor: ‘#f8fafc’,
borderWidth: 3,
hoverOffset: 4
}]
},
options: {
responsive: true,
maintainAspectRatio: false,
plugins: {
legend: { position: ‘bottom’, labels: { font: { family: “‘Inter’, sans-serif” } } },
tooltip: {
callbacks: {
label: function(context) {
return `${context.label}: ${context.parsed}%`;
}
}
}
},
cutout: ‘60%’
}
});

// — Initialize Default States —
updateStepDetails(‘1’);
updateDisguiseContent(‘delivery’);

});