Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #243357

Re: Identity Theft

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Tue, Dec 21, 2021, 17:23 tv.debian@googlemail.com <
tv.debian@googlemail.com> wrote:

> Le 21/12/2021 à 16:20, Richmond a écrit :
> > Jeremy Ardley <jeremy@ardley.org> writes:
> >
> >> On 21/12/21 9:59 am, rhkramer@gmail.com wrote:
> >>> On Monday, December 20, 2021 02:28:13 PM Brian wrote:
> >>>> On Mon 20 Dec 2021 at 10:32:31 -0500, rhkramer@gmail.com wrote:
> >>>>> My identity has been stolen, and although it has nothing to do with
> >>>> [...]
> >>>>
> >>>> May we know the URL of the financial website you contacted and the
> >>>> help number you phoned.
> >>> The website is troweprice.com, and the phone number is 855/654-5324.
> >>>
> >>> It looks like I didn't record the actual URL that I was on, but I
> don't think
> >>> you could see that exact page in any case as it was an https page and
> one that
> >>> showed my account numbers and balances.
> >>>
> >>
> >> There is a type of attack called cross-site scripting (XSS). It's
> >> mostly been eliminated by latest version browsers, but there are
> >> always zero-day vulnerabilities.
> >>
> >> The effect is that if you are vulnerable and have two tabs open, one
> >> to the legitimate site, and one to a bad guy site, the bad guy can
> >> alter your trusted site and for instance change a valid link into
> >> something malicious, or change a displayed phone number.
> >>
> >> More at https://owasp.org/www-community/attacks/xss/
> >
> > That doesn't explain how the phone log showed the correct number had
> > been dialled. I suppose it is possible a call was in progress or came in
> > at the exact moment that the number was dialled. But then how did the
> > number get logged as a call?
> >
>
> One possiblity is that the target (recipient of the call) company
> internal communication network was compromised. That happens quite
> often, not as much as mail servers but it is still not unknown.
>
> My money is on this^. They're probably hosting some services (phones but
> not necessarily) on premise and has been compromised. Another probable
> scenario imo is they're forwarding to cell phones due to pandemic/WFH and
> every now and then you're landing on a spoofed sim card.

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Identity Theft rhkramer@gmail.com - 2021-12-20 16:40 +0100
  Re: Identity Theft Nicholas Geovanis <nickgeovanis@gmail.com> - 2021-12-20 17:00 +0100
  Re: Identity Theft John Hasler <john@sugarbit.com> - 2021-12-20 17:20 +0100
    Re: Identity Theft "Jeremy Nicoll" <jn.ml.dbn.25@letterboxes.org> - 2021-12-20 19:10 +0100
      Re: Identity Theft John Hasler <john@sugarbit.com> - 2021-12-20 19:40 +0100
        Re: Identity Theft Nicholas Geovanis <nickgeovanis@gmail.com> - 2021-12-20 19:50 +0100
          Re: Identity Theft Nicholas Geovanis <nickgeovanis@gmail.com> - 2021-12-20 20:00 +0100
        Re: Identity Theft "Jeremy Nicoll" <jn.ml.dbn.25@letterboxes.org> - 2021-12-20 20:10 +0100
          Re: Identity Theft rhkramer@gmail.com - 2021-12-21 03:00 +0100
            Re: Identity Theft John Hasler <john@sugarbit.com> - 2021-12-21 06:00 +0100
            Re: Identity Theft Curt <curty@free.fr> - 2021-12-21 17:00 +0100
              Re: Identity Theft rhkramer@gmail.com - 2021-12-21 18:50 +0100
                Re: Identity Theft Curt <curty@free.fr> - 2021-12-21 19:50 +0100
                Re: Identity Theft rhkramer@gmail.com - 2021-12-21 20:10 +0100
  Re: Identity Theft Brian <ad44@cityscape.co.uk> - 2021-12-20 20:30 +0100
    Re: Identity Theft rhkramer@gmail.com - 2021-12-21 03:10 +0100
      Re: Identity Theft Jeremy Ardley <jeremy@ardley.org> - 2021-12-21 03:20 +0100
        Re: Identity Theft local10 <local10@tutanota.com> - 2021-12-21 09:20 +0100
          Re: Identity Theft Kenneth Parker <sea7kenp@gmail.com> - 2021-12-21 13:50 +0100
            Re: Identity Theft Eike Lantzsch ZP6CGE <zp6cge@gmx.net> - 2021-12-21 14:30 +0100
              Re: Identity Theft "tv.debian@googlemail.com" <tv.debian@googlemail.com> - 2021-12-21 14:40 +0100
                Re: Identity Theft Tim Woodall <debianuser@woodall.me.uk> - 2021-12-21 15:20 +0100
                Re: Identity Theft Markus Schönhaber <debian-user@list-post.mks-mail.de> - 2021-12-21 16:30 +0100
                Re: Identity Theft Dan Ritter <dsr@randomstring.org> - 2021-12-21 16:40 +0100
                Re: Identity Theft The Wanderer <wanderer@fastmail.fm> - 2021-12-21 16:40 +0100
                Re: Identity Theft Tim Woodall <debianuser@woodall.me.uk> - 2021-12-21 19:20 +0100
                Re: Identity Theft Celejar <celejar@gmail.com> - 2021-12-21 22:40 +0100
              Re: Identity Theft "tv.debian@googlemail.com" <tv.debian@googlemail.com> - 2021-12-21 14:40 +0100
        Re: Identity Theft rhkramer@gmail.com - 2021-12-21 18:40 +0100
        Re: Identity Theft Andrei POPESCU <andreimpopescu@gmail.com> - 2021-12-25 18:10 +0100
          Re: Identity Theft rhkramer@gmail.com - 2021-12-26 14:40 +0100
            Re: Identity Theft Hans <hans.ullrich@loop.de> - 2021-12-27 20:10 +0100
      Re: Identity Theft Jeremy Ardley <jeremy@ardley.org> - 2021-12-21 03:20 +0100
        Re: vulnerability classifications (was: Re: Identity Theft) Jeremy Ardley <jeremy@ardley.org> - 2021-12-21 03:50 +0100
        Re: Identity Theft Richmond <richmond@criptext.com> - 2021-12-21 16:50 +0100
          Re: Identity Theft harryweaver@tutanota.com - 2021-12-21 21:20 +0100
          Re: Identity Theft "tv.debian@googlemail.com" <tv.debian@googlemail.com> - 2021-12-21 23:30 +0100
            Re: Identity Theft Jeremy Ardley <jeremy@ardley.org> - 2021-12-21 23:50 +0100
            Re: Identity Theft Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2021-12-22 00:40 +0100
            Re: Identity Theft Philippe LeCavalier <support@plecavalier.com> - 2021-12-22 16:00 +0100
        Re: Identity Theft rhkramer@gmail.com - 2021-12-21 18:40 +0100

csiph-web