If VoIP is here can the thieves be far behind?
We have gotten used to reading about Phishing over the Internet. Phishing is the luring of an internet user to reveal personal details (like passwords and credit card information) on a fake web page or email form pretending to come from a legitimate company like a bank.
With Internet Telephony and use of VoIP gaining a lot of importance, phishers are now turning their attention and expertise towards this growing community of VoIP users. That VoIP has a fantastic future in the days ahead is an undisputable fact and realizing this, the phishers are cashing in on the opportunity.
The Modus Operandi: Unlike traditional style of phishing, innocent victims are lured to fake call centers or phony customer support numbers where they are asked to verify their account information. And because this type of Phishing is just catching on many people are blissfully ignorant about it and feel no apprehension in revealing their account details to the thief who they think represent their bank’s customer support agency.
As with any new type of attack, it seems as if the thieves are doing their preliminary rounds of proving the concept. However, it is just a matter of time before it becomes a full-fledged operation spanning over several continents across the Internet. It also poses the problem of someone in Australia theoretically being able to rob the details of a person in the United States and get away with it.
The Ease of Setting up: Under normal circumstances, setting up a front office and getting regular telephone lines and then trying to phish would have incurred some initial expenditure and would have been a expensive proposition to start with. But with the convenience of the Internet, there is no more a requirement to set up a front office and with VoIP technology even the telephone lines have become cheaper.
Service providers like Yahoo! Now provide a regular PTSN number to receive calls anywhere in the world. With such conveniences made available to anyone, if I wanted to set up a phoney customer support office to rob someone’s account in the US, why don’t I do it from sunny Spain?