India Broadband Forum

India Broadband

Online phishing attacks have now evolved into VoIP scams known as 'vishing', according to a security company.

This new method exploits the low cost of VoIP to extract financial information from unsuspecting credit card and banking customers.

Using an automated recording, victims are alerted that their credit card account details have been stolen, and that they need to call their bank with a supplied number. The number can be redirected anywhere across the world.

"Consumers need to be made aware of this new threat," said Eric Sorenson, senior sales engineer for New Zealand and Australia for Secure Computing, which issued the warning.

"Like most other social engineering exploits, vishing relies upon the 'hacking' of a common procedure that fits within the victim’s comfort zone.

"Specifically, this methodology takes advantage of what has become a normal practice for credit card users. It is a normal procedure when calling a credit card provider to be asked to enter your 16-digit credit card number before given the opportunity to speak to a credit card representative."

The company advised that banks usually refer to customers by their full name in all communication.