[145094] in cryptography@c2.net mail archive
Phone company phishes its own users
daemon@ATHENA.MIT.EDU (Peter Gutmann)
Sat Nov 21 15:58:34 2009
Date: Fri, 20 Nov 2009 20:12:13 +1300
From: Peter Gutmann <pgut001@cs.auckland.ac.nz>
To: cryptography@metzdowd.com
There have been numerous posts to this list about banks phishing their own
users so I figured I'd start a new thread about other companies who are
potential phishing-targets doing this as well, in this case a phone company.
>From the fraud-alert support forum of Vodafone:
http://forum.vodafone.co.nz/topic/3631-phone-call-from-vodafone-for-check-on-plan-and-confirming-contact-details-including-vf-pin-number/
User:
Not sure if this is genuine or not - just had a call from a blocked number
caller saying they were from Vodafone doing a 'courtesy' call checking I'm
happy on my plan and updating contact details. First thing they ask for is
my Date of Birth and Vodafone pin number. Is this genuine?
Vodafone staff:
I would not be giving out my date of Birth
User:
So thats a no to it being official then?
Vofafone staff:
Call was all good nothing to worry about
So next time you get a call from a caller-ID-blocked number asking for your
PIN, it's OK, it's only your phone company.
Peter.
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com