Archive

Archive for the ‘phishing’ Category

Caller ID Spoofing

December 29th, 2008

Caller ID Spoofing

Caller ID Spoofing has been around since the advent of Caller ID itself. In its simplest form Spoofing is the ability for a caller hide their identity by appearing to calling from a different or trusted number. One of the earliest uses of this tactic was for national sales teams to spoof using local numbers. Sales targets were more likely to answer a local call than a toll free number that appeared on their Caller ID.

Caller ID Spoofing has been used for fun little pranks to very malicious social engineering or pretexting calls and there are bills floating around to stop the practice. As with most technologies when scammers, fraudsters, stalkers, cheaters, and criminals begin to take advantage, efforts to curb its use take hold.

It doesn’t take a huge imagination to figure out what type of annoying little pranks can be performed with the ability to mask the number of an outgoing calls, but when spoofing into Law Enforcement Agencies, 911 Dispatches, and other public services things can get dangerous. There have been incidents of SWAT teams being sent to locations looking for armed intruders, false claims of hostage situations, and mass panic caused by the ability to conceal an identity.

Most of the trouble with Caller ID Spoofing comes when scammers feel protected enough to continually badger individuals, financial institutions, and credit card companies in an effort to gather information. The result is usually some form of fraud or identity theft.

Even with the possibility of legislation to seriously criminalize Caller ID Spoofing, protecting yourself using common sense is always the best defense against fraud. Currently, the Preventing Harassment Through Outbound Number Enforcement Act and the Truth in Caller ID Act are aimed at making it illegal to mask Caller ID numbers for intentionally defrauding or harassing others. However, these are not laws yet and prosecuting such acts will most likely prove difficult and costly for the average person.

The legislation itself is very limiting in the scope of what would or would not be considered illegal so not surprisingly even in the shadow of possible legislation more and more companies are advertising new and improved tools for Caller ID Spoofing. The names of the services might be ingeniously named but they are all based on the idea of masking identity to get a target on the phone.

So making sure you never give out any private information over the phone and keeping conversations with solicitors short and vague are great ways to avoid being lured into a scam. If you are interested in speaking with the caller who may be salesperson or a representative of a company you currently do business with, don’t be afraid to ask for their direct number and ring them back. If they are truly there to provide you with legitimate service they will have a way for you to call them.

Share/Save/Bookmark

phishing , , , , ,

Should I Worry About Pretexting?

December 20th, 2008

Should I Worry about Pretexting?

Pretexting is when someone intentionally falsifies their own identity or lies about something in order to get information out of YOU! This is easily done over the phone by someone who has put a lot of time and effort into figuring out how to get you, or any target, to give up some really personal information that will allow them to do some harm to personal accounts.

Credit Cards and Bank Account information are perfect targets for a pretext scam and some sort of telephone survey is usually put together to withdraw information commonly used in association with accessing those accounts. To protect yourself against a pretexting fraud is not that hard as long as you really think twice about answering questions involving mother’s maiden name, first telephone number, favorite author, etc.  You may recognize some of these terms from setting up your security questions for accounts, or ways to retrieve online passwords if you forget them.

There are plenty of legitimate telephone survey companies out there trying to perform good deeds and collect important information for credible pursuits but who really needs to participate with such a great risk of identity theft out there?  Remember, someone involved in pretexting has gone to great lengths to perfect their scam and appear to be a legitimate representative of some company or agency that most people use.  These criminals are masters of  Social Engineering and know how to gather information without us realizing it is going on.

So why worry about pretexting?

The real problem associated with a pretext type of scam is that once a person has some of your personal information, they can do a pretty good job convincing a customer representative of your bank or credit card company that they are actually you and need either a new credit card issued or some type of malicious balance transfer. There is really no limit to what a good thief can steal and we all really do need to worry about pretexting.

Now there are really two points to be made here. First is that you can protect yourself from a potential scam by knowing who is on the other end of the phone. If they are calling from a cell phone, their number will probably not be associated with any familiar number or a name in your call log.  Searching the number and identifying the owner of the cell phone can be done easily by using a free reverse look up or a cell reverse.  Once you find out the identify of the person behind the calls you can report them to the authorities or simply let them know you caught them phishing. The later usually works and they will move on to the next target.

The second point is that Trace A Cell Number or any reputable mobile number search will not have any information in their database obtained through pretexting. Cell phone number search data and unlisted telephone numbers are accessed through legitimate records and are compiled for use legally. Anyone can pay to use these phone records sources but good reverse look up services have done all the work and have all the information needed in one place and retrieve it for an absolutely minimal cost.

Share/Save/Bookmark

phishing , , , , , , , , , , ,