Mobile phone users should watch out for text messages containing a link to a website that, when visited, could download a Trojan horse, security experts have warned.

In a blog posting on Friday, McAfee called the new development 'SMiShing', referring to a phishing attack sent via SMS (short message service).

Some mobile phone users have started receiving an SMS that reads: "We're confirming you've signed up for our dating service. You will be charged $2/day unless you cancel your order," David Rayhawk wrote in the McAfee Avert Labs blog.

The message includes a URL that, if clicked on, downloads a Trojan horse that could allow a web-enabled phone to be controlled by hackers.

SMiShing is another example of how hackers are injecting phones and other mobile devices with malware and viruses that could penetrate enterprise networks, according to Rayhawk.