Network Security
Date Prev | Date Next |
Date Index |
Thread Index |
Author Index |
Historical
Actual Recording of a Vishing Attack
- From: Howell, Paul
- Date: Wed Oct 14 13:02:34 2009
At http://www.cuinfosecurity.com/articles.php?art_id=1858&rf=101309ec
Actual Recording of a Vishing Attack
Automated Message Seeks Personal Information from Bank Customers
October 13, 2009
Customers of Liberty Bank of Boulder Creek, CA. have been subject to an
automated phone call vishing scam (phone-based phishing) that references
Liberty Bank by name, making the attempt more believable to unsuspecting
victims.
Residents of San Lorenzo Valley and parts of Santa Cruz have reported
receiving automated phone calls, purportedly from Liberty Bank, saying,
"Your card has been suspended because we believe it was accessed by a
third party. Please press 1 now to be transferred to our security
department."
Customers who press "1" are asked to enter their credit/debit card
number and personal identification number. Once usernames and passwords
to a web-based e-mail account are captured from a customer, criminals
can access the login information and transfer money.
The Santa Cruz Sheriff's office initially handled the investigation, but
the case has been turned over to the FBI, says Jill Hitchman, first vice
president of the bank.
"There will be some losses," Hitchman says. "Charges started showing up
almost immediately after our customers gave away their card numbers."
Listen to the automated vishing call:
------------------------------------------------------------------------
To unsubscribe from netsec, send mail to majordomo@merit.edu
with a body consisting of the words "unsubscribe netsec" --
without the quotes. For more help, send a message to majordomo@merit.edu
with the word "help" as the body.
------------------------------------------------------------------------
|