Home > Ask the Security Experts > Expert Archive: Information Security Threats Questions & Answers > How to prevent VoIP phishing
Ask The Security Expert: Questions & Answers
EMAIL THIS

How to prevent VoIP phishing

Ed Skoudis, past SearchSecurity.com expert EXPERT RESPONSE FROM: Ed Skoudis, past SearchSecurity.com expert

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 03 July 2006
Do end-to-end encrypted VoIP phones prevent VoIP phishing?

>
No. While encryption is useful for protecting VoIP traffic from snooping, it does not stop VoIP phishing. VoIP phishing is when an attacker uses an automated tool to call VoIP numbers (and POTS numbers) to leave a message pretending to be your bank or other e-commerce entity. Therefore, even with a rock-solid encrypted VoIP connection, attackers can still make such calls.

To guard against VoIP phishing, be leery of giving sensitive personal information especially over your VoIP phone. And remember, VoIP caller IDs are easy to spoof, so don't trust the friendly voice on the other end of the phone line, until they prove their identity.

More Information:

  • Learn why hackers started using VoIP in phone phishing scams.
  • Learn how to mitigate other VoIP threats in this VoIP Security Learning Guide.

  • BROWSE BY TAG
    Expert Archive: Information Security Threats,   Network Protocols and Security,   Application and Platform Security,   Email and Messaging Threats (spam, phishing, instant messaging),   Email Protection,   Enterprise Network Security,   VIEW ALL TAGS

    Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



    RELATED CONTENT
    Expert Archive: Information Security Threats
    The telltale signs of a network attack
    Will Google Chrome enhance overall browser security?
    Are there antivirus suites that pick up more than just run-of-the-mill viruses?
    What tools can a hacker use to crack a laptop password?
    Are social networking sites an easy target for malicious hackers?
    What are the dangers of cross-site request forgery attacks (CSRF)?
    Should social engineering tests be included in penetration testing?
    What kind of data is compromised during a Google hack?
    Best practices for using restriction policy whitelists
    Defining mobile device security concerns

    Network Protocols and Security
    Expert calls SSL protocol vulnerability a non issue
    How to prevent phishing attacks with social engineering tests
    How SSL-encrypted Web connections are intercepted
    DNSSEC deployment challenges can be overcome
    Microsoft issues SMB vulnerability advisory, patch pending
    Microsoft repairs Windows media, TCP/IP vulnerabilities
    How to test IPv6 infrastructures
    DNSSEC deployments gain momentum since Kaminsky DNS bug
    Kaminsky interview: DNSSEC addresses cross-organizational trust and security
    How to create secure Windows FTP automation

    Email and Messaging Threats (spam, phishing, instant messaging)
    Messaging security risks have upper hand on solutions
    Web-based attacks skyrocket, pirating sites surge, security firms say
    Pushdo botnet uses Facebook to spread malicious email attachment
    Scareware report highlights successful business model
    How to prevent phishing attacks with social engineering tests
    Phishing protection begins with training, antiphishing evangelist
    Phishing attacks to remain a major problem, say security experts
    Barracuda acquires Purewire expanding Web security reach
    FBI raids phishing crime ring, nearly 100 arrested
    Massive phishing scheme affects Microsoft Hotmail accounts
    Email and Messaging Threats (spam, phishing, instant messaging) Research

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    5 terms you need to know before you employ VoIP  (SearchSecurity.com)
    digest authentication  (SearchSecurity.com)
    IGP  (SearchSecurity.com)
    IP spoofing  (SearchSecurity.com)
    Secure Sockets Layer  (SearchSecurity.com)
    smurfing  (SearchSecurity.com)
    Transport Layer Security  (SearchSecurity.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary



    Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice



    Find Security Solutions for Your Business
    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Site Map




    All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts