Re: Identity Theft

From	Philippe LeCavalier <support@plecavalier.com>
Newsgroups	linux.debian.user
Subject	Re: Identity Theft
Date	2021-12-24 16:40 +0100
Message-ID	<DxUPL-aa-1@gated-at.bofh.it> (permalink)
References	(1 earlier) <DxDvA-6AO-7@gated-at.bofh.it> <DxDOV-6H9-3@gated-at.bofh.it> <DxUd4-82I-3@gated-at.bofh.it> <DxUwp-8vj-3@gated-at.bofh.it> <DxUG5-73-5@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Fri, Dec 24, 2021, 10:26 John Hasler <john@sugarbit.com> wrote:

>  Philippe LeCavalier writes:
> > If the device isn't compromised (which, you saying so doesn't in any
> > way vet the device as safe and not compromised btw) then the desktop
> > you got the number from is the next step to vet.
>
> How do you explain the Google Voice log entries?
>

> Yes the legit number was called but randomly (so it appears) a imposter is
> answering while other times the legit company answers. That's the
> information we know for fact u less I'm mistaken.

So if you asked me to draw a conclusion and forego all the investigative
steps suggested which I do not recommend, I would say the two most probable
causes are a compromised PBX at the financial institute or sim card
cloning. Third on the list would be dns poisoning on the OPs gateway.

All 3 scenarios would have the log entries look legit.

Thread

Re: Identity Theft rhkramer@gmail.com - 2021-12-21 20:00 +0100
  Re: Identity Theft Curt <curty@free.fr> - 2021-12-22 15:20 +0100
    Re: Identity Theft rhkramer@gmail.com - 2021-12-22 19:50 +0100
      Re: Identity Theft Philippe LeCavalier <support@plecavalier.com> - 2021-12-22 20:00 +0100
        Re: Identity Theft John Hasler <john@sugarbit.com> - 2021-12-22 20:30 +0100
      Re: Identity Theft Curt <curty@free.fr> - 2021-12-22 20:10 +0100
        Re: Identity Theft rhkramer@gmail.com - 2021-12-22 20:20 +0100
        Re: Identity Theft rhkramer@gmail.com - 2021-12-23 14:10 +0100
          Re: Identity Theft Curt <curty@free.fr> - 2021-12-23 15:10 +0100
            Re: Identity Theft harryweaver@tutanota.com - 2021-12-23 21:40 +0100
              Re: Identity Theft Curt <curty@free.fr> - 2021-12-23 22:10 +0100
                Re: Identity Theft Jeremy Ardley <jeremy@ardley.org> - 2021-12-23 22:30 +0100
                Re: Identity Theft Philippe LeCavalier <support@plecavalier.com> - 2021-12-24 00:50 +0100
                Re: Identity Theft rhkramer@gmail.com - 2021-12-24 16:00 +0100
                Re: Identity Theft Philippe LeCavalier <support@plecavalier.com> - 2021-12-24 16:20 +0100
                Re: Identity Theft John Hasler <john@sugarbit.com> - 2021-12-24 16:30 +0100
                Re: Identity Theft Philippe LeCavalier <support@plecavalier.com> - 2021-12-24 16:40 +0100
    Re: Identity Theft harryweaver@tutanota.com - 2021-12-22 21:50 +0100

csiph-web