A phishing attack uncovered by SecureWorks tries to entice victims into forwarding their telephone calls in order to thwart out-of-band authentication by banks.
Researchers at SecureWorks have uncovered a new type of phishing attack that tries to trick victims into forwarding their telephone calls to the attacker to thwart attempts by a bank to detect fraud.
The attack, found by the Atlanta-based security vendor this week, begins with an e-mail sent from the phisher telling the potential victim their bank needs to verify their phone number immediately, and their account will be suspended if they do not confirm the number. The victim is told to confirm their number by dialing *72 and then another number, effectively forwarding their calls to the phisher's telephone.
After going through this process, the victim is asked in the e-mail to update their personal information, such as bank account and Social Security numbers. If the victim's bank calls to question an unusual transaction while the calls are being forwarded, the phisher need only confirm the illegal transaction is legitimate, SecureWorks researcher Don Jackson wrote on the company's Web site.
In an interview with eWeek, Jackson said these types of attacks are currently not widespread, but may become so in the future as more banks use out-of-band authentication - such as telephone calls - to check the validity of suspicious transactions.
He cautioned against trusting e-mails that request the recipient give up personal information.
"If they are asking you to do something, you should call your financial institution," Jackson said.
Copyright 2007 by Ziff Davis Media, Distributed by United Press International
Related stories:
Siemens to Migrate 110,000 UK Government Users to IP Telephony
Siemens Information and Communication Networks (ICN) will supply the enterprise infrastructure to transform one of Europe's largest privately managed networks
to support IP telephony. Siemens' contract, awarded by Global Crossing, a global telecommunication solutions provider, involves upgrading the existing voice network that Global Crossing uses to deliver fully managed services to more than 110,000 public sector personnel located at 550 locations. Global Crossing is partnering with Siemens to deliver IP-enabled telephony as a first step towards ultimately migrating government users to a fully converged IP VPN communications solution.
Group calls for free malaria treatment in Africa
(AP) -- Making tests and treatment for malaria free dramatically increases the number of people who seek treatment for the disease that kills 1 million people a year, an international medical aid group said Tuesday.
Science unveils hidden drivers of stock bubbles and crashes
Many economists believe that investors make decisions rationally, weighing up corporate data and other pricing signals to evaluate gain or risk before buying or selling stocks.
Warning buoys for right whales installed along Massachusetts Bay
Endangered North Atlantic right whales are safer along Massachusetts Bay's busy shipping lanes this spring, thanks to a new system of smart buoys. The buoys recognize whales' distinctive calls and route the information to a public Web site and a marine warning system, giving ships the chance to avoid deadly collisions.
Princeton researchers envision a more secure Internet
Like human society itself, the world's computerized infrastructure is wondrously complex, both spectacularly fertile and deeply flawed.
Ways to improve informed consent are testable, study says
New ways to make sure people are adequately informed about the risks and benefits of taking part in a clinical trial can be field-tested for effectiveness as vigorously as new medical treatments themselves, a study led by a Johns Hopkins bioethicist suggests.
Google meets Sherlock Holmes
Soon after 9-11, Americans wondered aloud: How did our guardians miss the clues? Suspects on watch lists had moved money in curious ways. “Chatter” had risen in recent months. A visitor to the country had offered cash to learn how to fly—but not land—a jetliner. In hindsight, these telltale nuggets provided evidence of the terror to come.
Innovations in International Calling: MAXroam SIM Cuts Costs
Cubic Telecom MAXroam Sim popular in Europe is on its way to North America. The MAXroam SIM card is inserted into an unlocked mobile phone with GSM network capability. MAXroam provides easy instructions on installation and will show consumers how to unlock their mobile phone. The initial cost is around $42.60.