Phishers Use Call Forwarding To Mask Fraud
April 28, United Press International
Researchers at SecureWorks have uncovered a new type of phishing attack
that tries to trick victims into forwarding their telephone calls to the attacker to thwart attempts by a bank to detect fraud. The attack, found this week, begins with an e−mail sent from the phisher telling the potential victim their bank needs to verify their phone number immediately, and their account will be suspended if they do not confirm the number. The victim is told to
confirm their number by dialing *72 and then another number, effectively forwarding their calls to the phisher's telephone. The victim is then asked in the e−mail to update their personal information, such as bank account and Social Security numbers. If the victim's bank calls to question an unusual transaction while the calls are being forwarded, the phisher need only
confirm the illegal transaction is legitimate, SecureWorks researcher Don Jackson wrote.
Jackson said these types of attacks are currently not widespread, but may become so in the future as more banks use out−of−band authentication −− such as telephone calls −− to check the validity of suspicious transactions.
Source: http://www.physorg.com/news96988034.html
05-01-07, 11:02 AM
Similar Threads
Linear Mode
