That annoying SMS phish you just got may have come from a box like this