There are two sides to the voice phishing here -
- getting the target to call a phone number you've emailed him
- using cheap voice calls to call the target with your offer.
VOIP doesn't affect the former case much,
since the target is paying for the call,
but it does separate callee geography
From Computerworld:
New phishing scam model leverages VoIP
Novelty of dialing a phone number lures in the unwary
News Story by Cara Garretson
APRIL 26, 2006
(NETWORK WORLD) - Small businesses and consumers aren't the only ones
enjoying the cost savings of switching to voice over IP
the other point that should be made about voip is that
callerid is trivial to spoof.
so if you are counting on the calling party being who they say the are,
or even within your company, based on callerid, don't.
i predict a round of targeted attacks on help desks and customer
service, as well
| the other point that should be made about voip is that callerid is
| trivial to spoof.
|
| so if you are counting on the calling party being who they say the
| are, or even within your company, based on callerid, don't.
|
| i predict a round of targeted attacks on help desks and customer
|
On Thu, Apr 27, 2006 at 01:12:43PM -0700, [EMAIL PROTECTED] wrote:
so if you are counting on the calling party being who they say the are,
or even within your company, based on callerid, don't.
does anyone know if time ANI from toll free services is still unspoofable?
make that real-time
mis == mis [EMAIL PROTECTED] writes:
mis does anyone know if [real-]time ANI from
mis toll free services is still unspoofable?
No, in general it is not unspoofable.
But you probably need the gateway into the PSTN to use SS7 and IMT
trunks; and that probably means a CLEC license in the US, or
