Some phone makers implementations of the Open Mobile Alliance Client Provisioning (OMA CP) standard allows anyone to send special provisioning messages to other mobile users with a $10 GSM modem and off-the-shelf software. When such a message is received, users are prompted to confirm that they accept the settings, but the researchers found there is no indication who the message is from on devices from Samsung, Huawei, LG and Sony. This can enable some very credible phishing attacks since most users will just assume the message came from their operator and agree to install the settings.”]