Cyber Risks · Krebs on Security

SMS About Bank Fraud as a Pretext for Voice Phishing

Summary: Phishers are increasingly sending linkless SMS messages about suspicious bank transfers as a pretext to call anyone who replies, as happened to a reader's daughter who received a text claiming a $5,000 payment from her account and, after replying "NO," was called seconds later by a spoofed "JP Morgan Chase" caller ID. In a 2020 case, a Silicon Valley executive named Mitch put suspected scammers on hold and called his bank on another line, but a member of the fraudster's team was simultaneously impersonating him with the bank's customer service.

What you should know: The attackers never try to log in to the bank account - the entire scam runs over the phone, and the phished information has been used in prior cases to open new accounts in the victim's name to receive and forward large wire transfers of stolen funds.

Read the original at Krebs on Security ↗

Topics
Phishing & Social Engineering
Related