• On last.fm: Michael Jackson radio - Listen now!
July 14, 2009 8:53 AM PDT

Cisco: Text message scams on the rise

by Elinor Mills
  • Font size
  • Print
  • 1 comment
Share

Cyber scammers are banking on the notion that many people who might not fall for a phishing scam via e-mail may still be easy targets through their mobile phone, according to security report released Tuesday from Cisco Systems.

Text message scams are on the rise, particularly fake messages that appear to come from a legitimate bank, said the report, which covers a wide variety of cybercrime topics.

In many of the scams, the SMS messages direct the recipient to call a telephone number where an automated message prompts the caller to provide log-in ID or account number and PIN. Other messages provide a URL that leads to a phishing site looks like a legitimate site.

Specific scams have targeted cell phone users in Fargo, N.D., along with customers of First Community Credit Union and Buffalo Metropolitan Federal Credit Union in New York and of BCT Federal Credit Union in New York and Pennsylvania, the report said.

"People are giving up information through the voice channel in a way they never would do through e-mail or the Web," said Patrick Peterson, Cisco's chief security researcher.

Meanwhile, cybercriminals are continuing to get more sophisticated and borrowing from real-world business models. For instance, researchers have come across a service called VirTest that will test malware and viruses against products from the major antivirus vendors for a fee, Peterson said.

Elinor Mills covers Internet security and privacy. She joined CNET News in 2005 after working as a foreign correspondent for Reuters in Portugal and writing for The Industry Standard, the IDG News Service, and the Associated Press. E-mail Elinor.
Recent posts from InSecurity Complex
Defense Dept. pulls software over privacy issues
Microsoft to plug critical IE hole targeted by exploit code
Avast update falsely flags good apps as malware
EFF sues feds for info on social-network surveillance
Fake CDC vaccine e-mail leads to malware
Building circuits, code, community at Noisebridge hacker space
Microsoft warns of IE exploit code in the wild
Chrome OS security: 'Sandboxing' and auto updates
Add a Comment (Log in or register)
by scottecher July 15, 2009 7:57 AM PDT
These idiots keep calling me. I haven't fallen for this scam, and every time I get in touch with someone, they refuse to give me their name, phone number, department, and manager name so I can call them back to make sure they are legit.

Too bad they think I am such a sucker...
Reply to this comment
advertisement
Click Here

The yogurt makers of tech: Gadgets to avoid

Don't buy these one-trick ponies--unless you like gizmos that gather dust.

Google wants to unclog Net's DNS plumbing

The Net giant, ever eager for a faster Internet, debuts its Google Public DNS service. With it, Google could become even more central to the Net.

About InSecurity Complex

Elinor Mills became fascinated with hacker culture when she was sent to Las Vegas to cover DefCon in 1995. Since then, script kiddies have given way to cyber criminals targeting bank passwords, and privacy risks are everywhere, from Google to Facebook and the iPhone. InSecurity Complex keeps tabs on the flaws, the foibles, and the fixes.

Add this feed to your online news reader

InSecurity Complex topics

advertisement
advertisement
Click Here

Inside CNET News

Scroll Left Scroll Right