[VOIPSEC] Phishers Snare Victims With VoIP

[Natas]

It's kind of lame that they won't say who the provider of the 800 number
was. Just something I'd kind of like to know.

I've been thinking that this was possible for a long time, and that it was
only a matter of time before phishers moved onto this technique. Phishers
change their techniques only when they are forced to. Phishers are
definately seeing the potential in Voice Over IP services.

This Voxilla article from last summer gives you some other examples of what
else Phishers may be using VoIP for.

http://voxilla.com/name-News-article-sid-166.html

Anyways, does anyone know how long the number was active for and how they
eventually got it taken down? I'm assuming they had to RESPORG it, and then
got the run around from there, because its a little hard to track down the
actual carrier providing the number to consumers with VoIP carriers.

Natas

Also, how was
On 4/26/06, Sylor, Mark <msylor at brixnet.com> wrote:
>
> You may have seen this article on how phishers directed users to call a
> fake bank automated voice response system to steal account numbers and
> PINs.
>
> http://www.techweb.com/wire/security/186701001;jsessionid=YCQ0GPZJERHJIQ
> SNDBOCKICCJUMEKJVN
>
> Because they used a VOIP service provider to set up their 800 number and
> Asterix to set up the voice response system this is a VOIP enabled
> security problem more than a security problem with VOIP.
>
> Still, I'm curious how this could be prevented. Is any of the VOIP
> Security work being discussed here relevant to this problem?
>
> Thanks,
>         Mark
>
>
>
> -----------------------------------------------------------------------------------------------------------------------------------------------
> Service Quality Matters. Test the performance and quality of your VoIP or
> IP video service at:
> http://www.TestYourVoIP.com
> http://www.TestYourIPVideo.com
>
> _______________________________________________
> Voipsec mailing list
> Voipsec at voipsa.org
> http://voipsa.org/mailman/listinfo/voipsec_voipsa.org
>