This is a new type of attack that, while not yet widespread, could end up costing consumers and network operators.