[VOIPSEC] Phishers Snare Victims With VoIP

[Gupta, Sachin]

It doesn't look like that VoIP has anything to do with these kind of
issues. Scammers could have used a PSTN numer as well, instead of VoIP.
This is more towards user's ignorance in verifying that the number is
actually the bank's telephone number.
User's awareness is the only method to prevent such kind of attacks.

Sachin

-----Original Message-----
From: Voipsec-bounces at voipsa.org [mailto:Voipsec-bounces at voipsa.org] On
Behalf Of Sylor, Mark
Sent: Wednesday, April 26, 2006 11:46 AM
To: Voipsec at voipsa.org
Subject: [VOIPSEC] Phishers Snare Victims With VoIP

You may have seen this article on how phishers directed users to call a
fake bank automated voice response system to steal account numbers and
PINs.
 
http://www.techweb.com/wire/security/186701001;jsessionid=YCQ0GPZJERHJIQ
SNDBOCKICCJUMEKJVN
 
Because they used a VOIP service provider to set up their 800 number and
Asterix to set up the voice response system this is a VOIP enabled
security problem more than a security problem with VOIP.

Still, I'm curious how this could be prevented. Is any of the VOIP
Security work being discussed here relevant to this problem?

Thanks,
	Mark


------------------------------------------------------------------------
-----------------------------------------------------------------------
Service Quality Matters. Test the performance and quality of your VoIP
or IP video service at: 
http://www.TestYourVoIP.com
http://www.TestYourIPVideo.com

_______________________________________________
Voipsec mailing list
Voipsec at voipsa.org
http://voipsa.org/mailman/listinfo/voipsec_voipsa.org