Phishing Without Clicking?

Filed in archive Spam on November 16, 2007

Network Information Security & Technology News brings us word of a new phishing scam that goes against the grain of many scams: there's no link to click anywhere in the message.

Phishing has typically relied on enticing you to click on a link that takes you to a site that looks like a valid site, but is really designed to capture your confidential data. The hackers behind this bogus site then use that data to steal your money.

In this case, however, there's no link: only an 800 number that you can call in order to reactivate your credit card. What's behind that 800 number? Most certainly not your bank. It's likely a low-end computer located outside the country connected to an 800 number over a VoIP connection. What's that low-end computer set up to do? Capture your credit card information.

It boils down to one simple thing: end user vigilance. If your bank sends you an email claiming your card is expired or suspended, don't call the number in the email. Call the number on the back of your card.