http://threatpost.com/vishing-attacks-targeting-dozens-of-banks/105774
Vishing Attacks Targeting Dozens of Banks by Chris Brook <http://threatpost.com/author/christopher> April 29, 2014 , 5:45 pm A recent VoIP-based phishing campaign has been netting the payment card information of up to 250 Americans per day. Voice over IP phishing, or vishing, is a form of phishing that relies on users getting tricked into giving up their payment card information after receiving phone or SMS messages – purporting to come from banks – instructing them to do so. Related PostsApple Phishing Scam Steals Credentials, Credit Cards<http://threatpost.com/apple-phishing-scam-steals-credentials-credit-cards/105108> March 28, 2014 , 12:27 pm Security the Facebook Way<http://threatpost.com/security-the-facebook-way/105035> March 26, 2014 , 11:03 am MH 370-Related Phishing Attacks Spotted Against Government Targets<http://threatpost.com/mh-370-related-phishing-attacks-spotted-against-government-targets/105024> March 25, 2014 , 4:04 pm Security firm PhishLabs unveiled research on the wave of attacks on its blog today<http://blog.phishlabs.com/vishing-campaign-steals-card-data-from-customers-of-dozens-of-banks>and said it stumbled upon a “cache of stolen payment card data belonging to customers of dozens of financial institutions” upon investigating the campaign. The firm speculates that an Eastern European crew is carrying out the spree of attacks by using email-to-SMS gateways to send messages informing victims that their debit card has been deactivated. More than 50 medium-sized banks have been targeted by campaigns over the last several years. In the attack, users are sent a message that their ATM card has been deactivated. The users are prompted to call a phone number to reactivate the card by entering their card number and their PIN – data that of course is stored, then later accessed by the criminals to be used in cash-out schemes. John LaCour, the South Carolina-based group’s founder and CEO, pointed out that the operation could be proving costly for users and banks alike. “Each stolen payment card can result in hundreds of dollars in fraud losses and card replacement losses,” LeCour wrote Tuesday. As the blog post notes, if it’s assumed withdrawal limits on ATM cards are around $300 per day, that’s about $75,000 per day that the attackers could be siphoning from unsuspecting users’ bank accounts. Data on this specific vishing attack is slim, but PhishLabs researchers claim that one of the phone numbers used in the campaign has been in use for more than six months and dates back to October 2013. On the whole, the technique has been around for years though. “It appears that these vishers have been active for several years,” LeCour said Tuesday, “They target a specific bank or credit union for a few days and then move on to another target.” The blog entry does a good job recapping exactly how vishing scams work: The attackers compromise servers to install interactive voice response (IVR) software. Then the attackers hack a VoIP server and its direct inward dialing function and rig it to send spam texts which direct victims to a hacked phone number which takes down their information. A similar streak of attacks plagued Skype users a few years back<http://threatpost.com/report-vishing-attack-targets-skype-users-050211/75190>. In that campaign users received a handful of calls from unknown numbers and heard pre-recorded messages informing them their machines were infected with a “fatal virus.” If users were gullible enough they’d be directed to a URL to get disinfected – which ultimately – and quite ironically – wound up deploying malware on the computers. __._,_.___ Visit Your Group<https://groups.yahoo.com/neo/groups/grendelreport/info;_ylc=X3oDMTJmdmdvNjUxBF9TAzk3MzU5NzE0BGdycElkAzIwMTk0ODA2BGdycHNwSWQDMTcwNTMyMzY2NwRzZWMDdnRsBHNsawN2Z2hwBHN0aW1lAzEzOTkwNzA5Mzk-> [image: Yahoo! Groups]<https://groups.yahoo.com/neo;_ylc=X3oDMTJlcXY4NzAzBF9TAzk3NDc2NTkwBGdycElkAzIwMTk0ODA2BGdycHNwSWQDMTcwNTMyMzY2NwRzZWMDZnRyBHNsawNnZnAEc3RpbWUDMTM5OTA3MDkzOQ--> • Privacy <https://info.yahoo.com/privacy/us/yahoo/groups/details.html> • Unsubscribe <[email protected]?subject=Unsubscribe>• Terms of Use <https://info.yahoo.com/legal/us/yahoo/utos/terms/> __,_._,___ -- -- Thanks for being part of "PoliticalForum" at Google Groups. For options & help see http://groups.google.com/group/PoliticalForum * Visit our other community at http://www.PoliticalForum.com/ * It's active and moderated. Register and vote in our polls. * Read the latest breaking news, and more. --- You received this message because you are subscribed to the Google Groups "PoliticalForum" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
