News for hackers. Stuff that matters.
Re:I was just subjected to the most credible phishing attemp... by dfcowell on Wednesday October 09, 2019 @09:35AM (#21203036)
It would be reasonably trivial to build a phone system that lets the agent generate a OTP of sorts.

"Hey, we need to talk about your account. Call our general enquiries number on our website, press 9 and enter 'XXXXXX' to be reconnected to me."

Re:I was just subjected to the most credible phishing attemp... by spartas on Wednesday October 09, 2019 @10:39AM (#21203691)
I was just thinking about how the agent could generate ephemeral PBX extensions. OTP-like would definitely be the way to go.

Edit: perhaps the extension would be per transaction, not per-agent, and when the customer calls the extension, the agents system can automatically pull up the customer’s account. These extensions should expire, but given the length of some customer calls, and how often I’ve been disconnected from customer service lately, perhaps it should be on the order of hours, not minutes or seconds