Phishing Expands - Becomes Vishing
If you're new here, you may want to subscribe to my RSS feed. Thanks for visiting!
What is vishing? “vishing” is a socially engineered means of stealing information and / or money from people using the voice telephone network. The term is short for “voice phishing,” and is the telephone equivalent of online scams designed to get people to reveal personal information.
How does it work? Attackers use caller ID spoofing to make their calls look like they are coming from a legitimate number. Because people typically trust caller ID, spoofed phone numbers can be especially damaging.
Like online phishing attacks, that direct victims to bogus Web sites, vishing attacks usually include a recorded message telling victims to call a toll free number. They’re then asked to enter a credit card number or some other personal information. For example, in warranty scams, victims are asked to buy a phony extended warranty for their car, costing them anywhere from $2,000 to $3,000 or more.
There’s several companies that offer commercial spoofing services, like SpoofCard. For that matter, VoIP services, like Skype and others, allow people to pick their area code and even the prefix number they want when setting up a new number. These numbers can then be used to hide where the calls are coming from.
Strangely enough, caller ID spoofing is not illegal. Yet. However there is legislation proposed that would make spoofing a phone number to look like it’s coming from somebody else illegal.
On the other hand, there are actually some legitimate uses for spoofing. VOIP providers by definition have to use spoofing, or some other kind of number manipulation, to create their users phone numbers. There’s other legitimate uses, like as doctors and other professionals that may want to return calls from patients / clients without revealing their home numbers. Online dating services that allow people talk to potential matches without exposinging their real phone numbers use spoofing. ID spoofing is also used to hide the location of victims in domestic violence cases.
Some sophisticated attacks combine vishing and phishing. Typically starting with a phishing e-mail saying there’s been a problem with some online account such as a bank, credit card company, online retailer, Etc. The victim is directed to call a number and enter their information to verify their account.
Some Vishing advice
Be wary of all unknown callers. Don’t trust phone calls any more than you would e-mails that ask for personal information.
Don’t trust caller ID. Remember that just like the From line on an Email, it can be easily faked.
Call them back. When someone is selling something or asking for personal information, say you’ll call them back, then get the company’s number from a third party like directory assistance. If it’s a bank or credit card company, use the contact number from your bill or or statement. Never give credit card information or other personal information to someone who calls you.
Register your number with the National Do Not Call registry at donotcall.gov
Technorati Tags: Dating Services, Voip Providers, Skype, Telephone Network, Voice Telephone, Attackers, Phishing Attacks, Caller Id Spoofing, Phone Number, Scams
If you enjoyed this post, make sure you subscribe to my RSS feed!
posted in Buyer Beware, Email "offers", Scams | Comments Off





