[VOIPSEC] Phishers Snare Victims With VoIP

[Matt Harrigan]

I agree Mark. This is not a security problem with VOIP. It's just bad
people being bad (that's what they do), and they happen to be using
voip. I don't really think the fraud here centers around what sort of
telephone system they used, or the fact that they used one at all. In
my opinion the issue is 50% psychological, in that we now live in a
world where response to what seems like normal stimuli needs to be
second guessed. I get mail at least once a week now that looks almost
exactly like a fedex package. Of course it isn't, it's ".01% mortgage
rates!!!" The same thing applies to consumer behavior. People need to
be educated about fraud by their banks. Banks don't call people and
ask for account numbers. Neither does the real royalty from Nigeria
(i'm still waiting for my $12.2m).

Anyhow, just a thought...

MH

On 4/26/06, Sylor, Mark <msylor at brixnet.com> wrote:
> You may have seen this article on how phishers directed users to call a
> fake bank automated voice response system to steal account numbers and
> PINs.
>
> http://www.techweb.com/wire/security/186701001;jsessionid=YCQ0GPZJERHJIQ
> SNDBOCKICCJUMEKJVN
>
> Because they used a VOIP service provider to set up their 800 number and
> Asterix to set up the voice response system this is a VOIP enabled
> security problem more than a security problem with VOIP.
>
> Still, I'm curious how this could be prevented. Is any of the VOIP
> Security work being discussed here relevant to this problem?
>
> Thanks,
>         Mark
>
>
> -----------------------------------------------------------------------------------------------------------------------------------------------
> Service Quality Matters. Test the performance and quality of your VoIP or IP video service at:
> http://www.TestYourVoIP.com
> http://www.TestYourIPVideo.com
>
> _______________________________________________
> Voipsec mailing list
> Voipsec at voipsa.org
> http://voipsa.org/mailman/listinfo/voipsec_voipsa.org
>


--
Matthew G. Harrigan
O:303-308-0505
M:303-668-0302
mobile email: mharrigan at tmail.com