- Related Stories
-
Feds call for global spam fight
April 20, 2006 -
Microsoft adds another antiphishing partner
April 19, 2006 -
What's the next security threat?
April 17, 2006 -
Fighting fraud by baiting phishers
March 31, 2006
Cloudmark, a San Francisco-based e-mail security company, said it has seen two separate attacks this week. In both cases, the spammed message warns of a problem with a bank account and instructs the recipient to dial a phone number to resolve it, the company said in a statement published Tuesday.
The caller is connected to a voice response system that is made to sound exactly like the bank's own system, Cloudmark said.
"The phone system identifies itself to the target as the financial institution and prompts them to enter account number and PIN," Cloudmark said.
"The result can be personally financially devastating," Adam O'Donnell, the senior research scientist at Cloudmark, said in the statement.
Phishing scams are prevalent and continue to proliferate. In traditional scams, miscreants try to pilfer personal information by sending spam e-mail with links to a malicious Web site, crafted to look like a site belonging to a trusted service provider. The phone scams are a new twist, made possible by cheap Internet-based telephone services, Cloudmark said.
Antispam technology can block the e-mail scams, Cloudmark said. The company urged people who do receive the messages to notify their service providers immediately. As a precaution, people should not dial phone numbers received in an e-mail message and should double-check and dial the numbers printed on ATM and credit cards instead, it advised.
See more CNET content tagged:
Cloudmark, phishing, twist, service provider, bank




- To be protected you need CallingID toolbar
- by ba_oren April 28, 2006 10:06 AM PDT
- CallingID for the Internet is a simple add-on to their browser. When users install CallingID they experience the Internet from a new angle. For the first time they see who owns the sites they visit, where the owner is located and receive an immediate indication about the risk level of sending data to these sites. When visiting msn.com they see that the site is owned by Microsoft and it is OK to send personal information to this site, but when they visit kazza.com they see that the owner of this site is hiding his identity and accordingly, sending data to such a site is considered high risk (information sent to someone who deliberately hides his identity may be used by scammers). CallingID verifies for the user when it is OK to send data, particularly personal information which requires an encrypted session, and when there is a risk involved. A simple display indicates the site?s safety level, resulting from 52 different security tests performed behind the scenes and, if the user wishes, he receives all the detailed test results. CallingID can be downloaded from CallingID web site or from download.com
- Reply to this comment
-
-
- why post three times?
- by techguy83 April 28, 2006 3:51 PM PDT
- Or was C-Net acting up again?
-
-
(10 Comments)