Vishing Attacks Becoming More Realistic
Last summer we posted an article The Basics of Vishing on the social engineering scam technique that uses VoIP. Now SANS is reporting on some new techniques that make vishing attacks even more realistic.
For example, vishers are recording snippets from the target company using them in the vishing lure. Since VoIP caller IDs can be spoofed, its a good idea to verify the company number. Vishers are on top of this one too according to SANS by:
1. Using search engine optimisation (SEO) poisoning techniques to position the fake phone numbers associated to legitimate organisations on top of search engines.
2. Encouraging the victim (through the initial fake e-mail) to call the fake number.
Websense found these techniques in use in China. This isn't the first time vishers have used a combination of technologies to appear more legitimate. Last spring Brian Krebs reported on a vishing scam that used a combination of Web hacking and cell phone texting.
Email This!
Digg it!
Sphere it!
Del.icio.us
Reddit!
Newsvine
