Namecheap live chat social engineering leads to loss of 2 VPS

Re:Namecheap live chat social engineering leads to loss of 2... by 8_hours_ago on Tuesday April 12, 2016 @03:08PM (#11482568)

Until someone says "I know my dad was born in Minneapolis, what does it say??" and the customer service representative replies "Huh, it looks like the answer is just gibberish...", "Ah! I must have just mashed on my keyboard when I made the account, sorry about that!!", "No problem, your password is now reset to foobar".

[ Parent | on HN ]

Re:Namecheap live chat social engineering leads to loss of 2... by ludamad on Tuesday April 12, 2016 @03:54PM (#11482998)

While avoidable with training, that brings up its own issue: What if what's being asked of the people taking these calls is outside their pay range?

[ Parent | on HN ]

Re:Namecheap live chat social engineering leads to loss of 2... by aquadrop on Tuesday April 12, 2016 @06:54PM (#11484292)

I think all account credentials related things should be handled by special support people, who were trained to understand the situation. Shouldn't be that big percentage of all requests when people need to change/remember password and can't use regular ways.

[ Parent | on HN ]

Re:Namecheap live chat social engineering leads to loss of 2... by voltagex_ on Wednesday April 13, 2016 @12:34AM (#11485763)

Then the company's decisions on how much to pay their call centre staff has just opened up a possible vector for attack. Simple as that.

[ Parent | on HN ]