Skip to main content

Posts

Showing posts from September, 2018

What is Vishing?

Vishing is the practice of using social engineering over the telephone system with the purpose of stealing sensitive financial information or other sensitive personal data from a victim. Vishing is one of the most serious threats today and is widely perpetrated by criminals. The word “ vishing ” is a combination of two words “voice” and “phishing”. In this technique, attackers use the telephone system to do phishing and hence the name. Vishing is typically used by criminals to steal sensitive banking information like account number, PIN, password, OTP, and credit card numbers or to steal other personal details of users that the attackers can exploit to perpetrate identity theft. Attackers often use VoIP and an automated system like IVR to perpetrate vishing. They may even use techniques like War Dialing and Caller ID Spoofing to serve their purpose. How does Vishing work? Attackers may perpetrate vishing as mentioned below. Criminals first harvest phone nu