Home > Ask the Security Experts > Expert Archive: Information Security Threats Questions & Answers > How to prevent VoIP phishing
Ask The Security Expert: Questions & Answers
EMAIL THIS

How to prevent VoIP phishing

Ed Skoudis EXPERT RESPONSE FROM: Ed Skoudis

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 03 July 2006
Do end-to-end encrypted VoIP phones prevent VoIP phishing?

>
EXPERT RESPONSE
No. While encryption is useful for protecting VoIP traffic from snooping, it does not stop VoIP phishing. VoIP phishing is when an attacker uses an automated tool to call VoIP numbers (and POTS numbers) to leave a message pretending to be your bank or other e-commerce entity. Therefore, even with a rock-solid encrypted VoIP connection, attackers can still make such calls.

To guard against VoIP phishing, be leery of giving sensitive personal information especially over your VoIP phone. And remember, VoIP caller IDs are easy to spoof, so don't trust the friendly voice on the other end of the phone line, until they prove their identity.

More Information:

  • Learn why hackers started using VoIP in phone phishing scams.
  • Learn how to mitigate other VoIP threats in this VoIP Security Learning Guide.

  • Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


    RELATED CONTENT
    Phishing
    EV SSL certificates won't stop phishers, researchers say
    Apple iPhone mail, Safari prone to spoofing
    ING hopes to cut phishing attacks with encryption software
    Companies still monitoring email manually, survey finds
    Trojan downloaders, droppers skyrocket, Microsoft says
    New phishing, Zeus Trojan technique spreads crimeware
    New Storm attack exploits April Fool's Day
    Clinton, Obama campaigns used in spam blasts
    How secure is online banking today?
    Google-Postini email services deliver security market message
    Phishing Research

    VoIP Security
    Will VoIP attacks result in more than just spam?
    Has FFIEC made any VoIP-specific mandates?
    Enterprise security in 2008: Addressing emerging threats like VoIP and virtualization
    Why does Skype connect to so many servers?
    Securing VoIP Networks: Threats, Vulnerabilities and Countermeasures
    Cisco issues CallManager security update
    Skype outage highlights VoIP issues
    Will deploying VoIP on an 802.1x network create security problems?
    Black Hat 2007: VoIP security reaches tipping point
    Unified communications infrastructure threats and defense strategies
    VoIP Security Research

    Expert Archive: Information Security Threats
    Are there antivirus suites that pick up more than just run-of-the-mill viruses?
    What tools can a hacker use to crack a laptop password?
    Are social networking sites an easy target for malicious hackers?
    What are the dangers of cross-site request forgery attacks (CSRF)?
    Should social engineering tests be included in penetration testing?
    What kind of data is compromised during a Google hack?
    Best practices for using restriction policy whitelists
    Defining mobile device security concerns
    What are the risks associated with RIM's line of PDAs?
    What security measures can be taken to stop crimeware kits?

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    crimeware  (SearchSecurity.com)
    pharming  (SearchSecurity.com)
    phishing  (SearchSecurity.com)
    Rock Phish  (SearchSecurity.com)
    spear phishing  (SearchSecurity.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary



    Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice



    Find Security Solutions for Your Business
    Targeted Security Channel Tips for Resellers, Integrators and Consultants
    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Reprints  |  Site Map




    All Rights Reserved, Copyright 2003 - 2008, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts