SMS phishing attacks hit mobile users