Hi-tech fraudsters have begun using recorded telephone messages in a bid to trick users into handing over confidential account information. The tactic has been adopted as a variant of recently detected phishing attacks targeting customers of the Santa Barbara Bank & Trust.

The attack begins with a spoofed email message (commonly with the subject line "Message 156984 Client's Details Confirmation (Santa Barbara Bank & Trust"). Instead of seeking to persuade users to visit a bogus website, these emails direct them towards phoning a number in Southern California.

When potential marks dial the phone number, a recording (http://www.websense.com/securitylabs/images/alerts/june_vishing.wav) requests that they enter their account number.

Net security firm Websense notes (http://www.websense.com/securitylabs/alerts/alert.php?AlertID=534) that the recorded message does not mention the Santa Barbara Bank & Trust, a sign that the same phone line is potentially being lined up for fraudulent attacks targeting the customers of other online banks or ecommerce firms. ®

Related stories

A third of dodgy emails are phishing attacks (5 September 2006)
http://www.theregister.co.uk/2006/09/05/august_malware_report/
Gmail phishing email offers $500 prize (12 July 2006)
http://www.theregister.co.uk/2006/07/12/gmail_phish/
Phone phishers target PayPal (7 July 2006)
http://www.theregister.co.uk/2006/07/07/paypal_phone_phish/
Two charged with VoIP fraud (8 June 2006)
http://www.theregister.co.uk/2006/06/08/voip_fraudsters_nabbed/
MS takes rod to phishers (1 April 2005)
http://www.theregister.co.uk/2005/04/01/ms_phish_lawsuits/
Spam gets vocal with VoIP (17 February 2005)
http://www.theregister.co.uk/2005/02/17/spam_gets_vocal_with_voip/
VoIP security group goes on the defensive (8 February 2005)
http://www.theregister.co.uk/2005/02/08/voip_security/
Phreakers will rape and pillage your mobile (22 October 2004)
http://www.theregister.co.uk/2004/10/22/mobile_java_peril/
Filipino phone phreakers foiled (20 July 2004)
http://www.theregister.co.uk/2004/07/20/filipino_phone_phreakers/