Phishing threatens VoIP

On April 25, a security firm said it had discovered a phishing campaign targeting Internet phone service (VoIP) attacks.

Phishing attack - also known as phishing - is targeted to replicate automated voice answering systems of banks to steal passwords, account numbers and guest personal information. line.

In last week's attack, the scammer sent fake messages from a bank to the user and asked them to dial a phone number to talk to a bank representative.

The phone number will be sent to an automated voice answering system that requires the caller to read the account information and personal identification number (PIN) to allow access to their personal bank account.

This phone number is taken from an Internet telephone service provider (VoIP).

So far there has been no indication that VoIP service providers are aware of this online phishing attack.

This incident marked a move in the fraudulent methods of phishing attackers. This is also the method of online fraud through the first VoIP service system discovered.

Security firm has discovered that online scammers have used an open source software called Asterisk to turn a computer into a PBX - Private Branch Exchange - running an automated phone information system. This system has the same tone as the free phone tone of banks to trick users.

Security firm found that the scam believed that attackers used infected computers to control Internet calls.

It can be said that using VoIP is a natural move of online scammers because this service has Internet technology. Besides getting a VoIP phone number is a fairly easy and inexpensive affair and calls can be redirected to any IP address. In this attack, online scammers use a solution similar to an email attack solution just as they use up to three different VoIP phone numbers.

Hoang Dung