Spoofing Caller-ID: The New Hacking Inroad
ID: 8fb9fbb7-ec37-5036-a005-a2e78b519831
STIX ID: report--8fb9fbb7-ec37-5036-a005-a2e78b519831
Feed Name: Zscaler Security Research Blog
Threat Score
The report warns that relying on caller-ID or SMS source as authentication is insecure because attacker-controlled spoofing services enable account takeover and configuration changes; it cites cases involving Twitter and Google Voice and an XSS on Skype, and recommends not using telephony-origin information as an authentication factor.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.