VoIP & SMS as Phishing Attack Vectors
This article caught my eye mostly because of the reference to SMS. In the past coulpe of weeks, several SMS phishing schemes have surfaced, mostly in Asia. As SMS usage grows worldwide, the danger of a link emebedded in a text message will present another threat vector via smartphones. We'll all need to pay attention, and user awareness is the key defense. Remember that phising is a social engineering attack.
Phishers' Latest Platforms: VoIP, SMS
By Gregg Keizer,
Phishers have branched out beyond e-mail, a security researcher said, and are now exploring both VoIP and text messaging as attack avenues.
Voice over IP is attractive to identity fraudsters, said Zulfikar Ramzan of Symantec's Advanced Threat Research group, in a company blog entry Tuesday, because it's an affordable way to dial large numbers of phone numbers. Dubbed "vishing" for voice phishing, "such attacks can be conducted cheaply enough that phishers might see a sufficient return on their investment," Ramzan said. Phishers substitute phone numbers for URLs in traditional e-mailed come-ons or dial consumers directly, circumventing e-mail entirely.
Technorati Tags: unified communications, VoIP, phishnig, social engineering, VoIP secuirty, infosec
Email This!
Digg it!
Sphere it!
Del.icio.us
Reddit!
Newsvine