News for hackers. Stuff that matters.
Re:T-Mobile Confirms It Was Hacked by polka_haunts_us on Monday August 16, 2021 @04:39PM (#28202661)
I had 5 spam calls this morning from various suspicious phone numbers, including one from Europe. That's more than I've gotten since I first got this phone number total.

I guess it's unreasonable to expect the good times to last like that but man, I'm still deeply unhappy with T-Mobile right now.

Re:T-Mobile Confirms It Was Hacked by abawany on Monday August 16, 2021 @04:45PM (#28202736)
Google Voice (GV) and Voip.ms have fairly sophisticated screening that tends to get the 'vehicle warranty' bots to hang up quickly. I wish our phone carriers offered such methods to ensure that their 'services' remain relevant in an increasingly spammy world. Edit: for GV, you will need to enable screening by going to https://voice.google.com/u/0/settings and setting "Screen calls" and for Voip.ms, you will need to setup a IVR so that callers have to enter in a code before they are allowed through.
Re:T-Mobile Confirms It Was Hacked by samstave on Monday August 16, 2021 @04:58PM (#28202885)
I get MANY GV spam calls

https://i.imgur.com/jKEA3Tw.png

I NEVER use my GV number... I just don't know how they get my number to begin with....

But the numbers that are super spam are all the ones with ~4 second VM.

I keep hearing from this weird New Jersey Jewish Accent where he tells me "I am under attack for someone who is causing my pain and attempting to steal money from me and if I pray and send him money he will take care of this attack against me"

This spam call is really good at avoiding number blocking - and I get ~2 calls per month from this recording... (The accent is like if Mel Blanc attempted to do an over-the-top Jewish accent... its really over the top. I recommend everyone listen to it and picture "The Producers" with Mel Blanc singing it...

I actually listen to it every few months or so because how comical the message is.

Re:T-Mobile Confirms It Was Hacked by abawany on Monday August 16, 2021 @05:14PM (#28203064)
Consider enabling screening in GV settings https://voice.google.com/u/0/settings .
Re:T-Mobile Confirms It Was Hacked by r00fus on Monday August 16, 2021 @05:27PM (#28203200)
I use GV and call-screening. Much less spam. Callers hate it, but it's kinda like a verbal captcha.

Oh and my cell phone area code is different than the local area code - so I ignore all calls from my (xxx) - xxx range regardless.

My family/friends have my direct#.

Re:T-Mobile Confirms It Was Hacked by abawany on Monday August 16, 2021 @06:34PM (#28203802)
BTW, you can go into 'Legacy GV' interface and into Groups to whitelist contact groups (e.g. 'All Contacts') who will get straight to you without this screening.
Re:T-Mobile Confirms It Was Hacked by r00fus on Tuesday August 17, 2021 @01:03AM (#28206400)
Thanks - this is excellent.
Re:T-Mobile Confirms It Was Hacked by sosborn on Monday August 16, 2021 @05:33PM (#28203245)
> I just don't know how they get my number to begin with....

They don't need to get it. They can just take random guesses with valid area/country codes.

Re:T-Mobile Confirms It Was Hacked by dopamean on Monday August 16, 2021 @05:02PM (#28202938)
I've been using google voice for 7+ years and I get a TON of those vehicle warranty calls. At least one almost every day.
Re:T-Mobile Confirms It Was Hacked by abawany on Monday August 16, 2021 @05:13PM (#28203057)
You need to enable screening by going to https://voice.google.com/u/0/settings .
Re:T-Mobile Confirms It Was Hacked by mfkp on Tuesday August 17, 2021 @12:07AM (#28206137)
I've got screening enabled and still get at least 3 spam calls per day, usually more.
Re:T-Mobile Confirms It Was Hacked by abawany on Tuesday August 17, 2021 @02:05AM (#28206676)
I am surprised - they are ringing your phone/the app vs. just ending up as 'missed calls'? I presume you are also marking them as spam to prevent recurrence and that these numbers are not in your contacts? (Not being sarcastic, just trying to help.)
Re:T-Mobile Confirms It Was Hacked by mfkp on Tuesday August 17, 2021 @02:09AM (#28206702)
Yes, it rings my phone. Most are annoyingly early in the morning, and 90% of the time it comes from random numbers in the same area code as my phone number.

I haven't been marking the numbers as spam, but maybe I'll try to do that to see if the number of calls reduces.

Re:T-Mobile Confirms It Was Hacked by abawany on Tuesday August 17, 2021 @02:31AM (#28206823)
One more thing to check: in the Legacy GV webapp (google.com/voice/b/0/redirection/voice) in the Groups tab, the Screening is On for anonymous callers in addition to the original place that I listed above?

Hopefully marking as spam will help too. One thing I like about Voip.ms vs. GV is that in the former, I can mass block an entire range of number using wildcards, which is rather satisfying especially since I setup the rules to ring as busy vs. just hanging up to keep their systems online a bit longer vs. freeing them to disrupt their next victim.

Re:T-Mobile Confirms It Was Hacked by saxonww on Monday August 16, 2021 @04:55PM (#28202840)
I'm on Google Fi and get car warranty calls all the time.

The only technique that works is to not answer the phone unless it's from a known contact. Most spam stuff won't leave a message, or it will be a consistent ~4 seconds of silence. Fi (or Android? IDK) has a call screening function which 9/10 if I send something to it, they will hang up before the automated preamble finishes.

Re:T-Mobile Confirms It Was Hacked by brandonhorst on Monday August 16, 2021 @05:04PM (#28202954)
Google Fi and Google Voice are not the same thing - Fi has no such built-in protection.
Re:T-Mobile Confirms It Was Hacked by aesh2Xa1 on Monday August 16, 2021 @09:11PM (#28204962)
I think they do have the same feature, despite being different services. In fact, I believe that the call screen service is offered even on any Pixel phone, regardless of carrier (Google Fi).

https://support.google.com/voice/answer/9262934

https://support.google.com/phoneapp/answer/9118387

Re:T-Mobile Confirms It Was Hacked by samstave on Monday August 16, 2021 @06:10PM (#28203579)
I think we need an automated Invoice Filing System for "warranty calls" billed directly to the auto companies.

In addition to the Hilton and Marriott Hotel Chains for their "You recently stayed at the [Hotel]" calls...

I was an elite member at Marriott for years, and I am convinced that my numbers were released in their breaches.

Re:T-Mobile Confirms It Was Hacked by leeoniya on Tuesday August 17, 2021 @12:30AM (#28206248)
> Voip.ms

i ported my mobile number to them a week ago hoping to only ever need an LTE, 5G or WiFi data connection for cell service.

alas, i discovered that MMS (and therefore group SMS, too) dont't work through SIP protocol. that's a deal breaker for me, unfortunately. looks like i'll have to port it back out to AT&T, Verizon or T-Mobile :(

Re:T-Mobile Confirms It Was Hacked by abawany on Tuesday August 17, 2021 @02:08AM (#28206689)
You are right - the MMS functionality is only supported by their web app so far: https://wiki.voip.ms/article/MMS . Is Google Voice an option for you or are you (understandably) hesitant to use their services for a critical/sensitive/family number? Based on my limited use, GV appears to support MMS including in group texts.
Re:T-Mobile Confirms It Was Hacked by rsuelzer on Tuesday August 17, 2021 @04:50AM (#28207634)
The latest trick is for spammers to send MMS and then see who responds. I am still getting texts from people on the thread to stop responding, although now it devolved into a political fight with two numbers constantly texting "Trump won". There is no way to remove myself either... I had to disable GV forwarding, but apparently this is enough of a problem that they are disabling forwarding anyway.
Re:T-Mobile Confirms It Was Hacked by abawany on Tuesday August 17, 2021 @10:18AM (#28210109)
I recommend marking the thread as spam then - that tends to disappear it altogether.
Re:T-Mobile Confirms It Was Hacked by rPlayer6554 on Monday August 16, 2021 @06:40PM (#28203845)
The Google Pixel has this built in as well.
Re:T-Mobile Confirms It Was Hacked by ASalazarMX on Monday August 16, 2021 @05:10PM (#28203026)
The amount of unwanted calls has skyrocketed this last year. I was forced to automatically reject calls that weren't in my contacts. Anyone important already can email or message me.

Big email providers are very good at filtering spam, so if enough people blocks calls, the only spam venue left would be instant messaging.

Re:T-Mobile Confirms It Was Hacked by yuy910616 on Monday August 16, 2021 @05:23PM (#28203173)
I've actually been answering each spam call - and try to get them to stay on the line for as long as possible.

My assumption is that they have some sort of CMS software and that it costs money to call. If you don't answer - they'll keep trying you. But if you do answer and costs them money - they'll put you in the 'do not call' list.

Just my guess - but so far it has worked for me personally.

Re:T-Mobile Confirms It Was Hacked by mwint on Monday August 16, 2021 @05:34PM (#28203257)
I can confirm answering calls and using as much of their time as possible totally works. I’ve been doing this for a year or more now; I get excited when a spammer calls me now. It’s about a monthly affair.

I have a bookmark for https://www.getcreditcardnumbers.com/ - I happily give them all the credit card numbers they want (the ones from that site pass the checksum, but of course isn’t valid in combination with a made up expiry and CVC).

After a couple card numbers fail, they cuss me out, sometimes threaten my life, and never call again.

My theory is they get flagged by their payment processor if they submit many bogus credit card numbers.

It’s about a 10-minute investment once a month. Less time than I used to spend answering and hanging up on spam calls.

Re:T-Mobile Confirms It Was Hacked by vessel on Monday August 16, 2021 @08:53PM (#28204835)
Thanks, I've been wasting their time by keeping them on the line (at no cost to me other than the time I used to amuse myself with annoying them) but I didn't know about the credit card generator, weill definitely use that!
Re:T-Mobile Confirms It Was Hacked by ASalazarMX on Monday August 16, 2021 @05:48PM (#28203375)
This is brilliant. I don't know what a pissed off spammer with who knows how many of your info could do, though. The last time I made one angry for wasting her time, I received even more calls from other spammers.
Re:T-Mobile Confirms It Was Hacked by mwint on Monday August 16, 2021 @11:05PM (#28205730)
I’m not concerned for two reasons…

(1) Usually they think my name is the guy who had my phone number almost 10 years ago. I “correct” them to a fake name, but it shows their record keeping is not good enough to track anyone down.

(2) If they tried to follow through on the death threat, they’d have a hard time getting a visa with “need to kill citizen” as the justification.

Early on, I had a temporary bump in calls after doing this. If you stick with it for a few weeks, eventually you’ll get on enough “real” do-not-call lists that the calls fade away.

Re:T-Mobile Confirms It Was Hacked by ASalazarMX on Monday August 16, 2021 @05:42PM (#28203325)
It's a good strategy. They feed the autodialer with a list of phones, and when it hears human voice, it transfers the call to an operator. If you didn't answer it will call you several more times. If you answered but didn't speak, it will (probably) not insist for that day.

My record is a call of around 14 hours. The autodialer called me after 10:00pm (supposedly illegal here), and there were no operators to take the call. I left my phone charging with the call active, and went to sleep, since the caller pays the call. Kept the call until I needed to go out, and I like to think that even if the call wasn't expensive because it was bulk price, maybe having a line busy helped slow down spam for others.

I don't do that anymore because spam calls have multiplied, it would mean answering more spam than I'd like.

Re:T-Mobile Confirms It Was Hacked by blisterpeanuts on Monday August 16, 2021 @11:16PM (#28205804)
I always answer, and immediately mute and put on speaker. Some will maintain the connection for 30 seconds; others will never disconnect. If it's a real contact, usually they'll say "Hello? Blisterpeanuts? Are you there???" and then I pick up.
Re:T-Mobile Confirms It Was Hacked by heisenbugtastic on Monday August 16, 2021 @06:56PM (#28203938)
Set my voice mail message to a modem carrier tone. Does not help too much with the spam calls, but no political calls anymore.
Re:T-Mobile Confirms It Was Hacked by nerdponx on Monday August 16, 2021 @05:30PM (#28203231)
I would love to run SpamAssassin (a least the Bayesian text analysis part) SMS/IMs. I suspect it would do pretty well.

Is there a way to tell if a phone number is from a VoIP service? It'd be great if I could just block those wholesale, as well as any text message that's sent from an email address.

Re:T-Mobile Confirms It Was Hacked by toast0 on Tuesday August 17, 2021 @02:57AM (#28206970)
> Is there a way to tell if a phone number is from a VoIP service?

Comment below was written for voice calls, SMS may be more tractable.

(Assuming US numbers) Yes, but it costs money. You can get (free) data from NANPA on which carrier was originally allocated the number, but it may have been ported.

But, the big blocker is a lot of source numbers are spoofed; not sure if a spoofed landline is less spammy than a spoofed VoIP; although an unallocated number is probably more spammy (OTOH, allocation data isn't always timely updated). If you could get the equivalent of Received headers, that would be a lot more useful, but that's not really an option.

Re:T-Mobile Confirms It Was Hacked by mwint on Monday August 16, 2021 @05:43PM (#28203332)
Having worked in products using VoIP stuff, you’ll hit issues with 2FA requests from some apps. The big names have their own shortcodes, but many smaller apps use a generic VoIP number from Twilio or similar.
Re:T-Mobile Confirms It Was Hacked by aaaaaaaaaaab on Monday August 16, 2021 @04:55PM (#28202835)
Is this a US thing? I’ve never received unsolicited spam calls here in Europe…
Re:T-Mobile Confirms It Was Hacked by njovin on Monday August 16, 2021 @04:59PM (#28202892)
Yes, it's pervasive. I get 4-5 calls per day, most of them scams trying to sell auto warranties or cheap vacations. All of them spoof the caller ID of the caller so it looks like somebody from my area. We have a national do-not-call list is a joke but that only holds legitimate businesses accountable. There's almost no enforcement for these fly-by-night companies.

There are initiatives in the works to prevent this behavior but they keep getting delayed, presumably because the telcos will have to do some work that doesn't fill their pockets so they're dragging their feet.

Re:T-Mobile Confirms It Was Hacked by oceanghost on Monday August 16, 2021 @07:23PM (#28204116)
Yes, it is a symptom of our collective inability to solve problems-- even trivial ones.

Most people I know get between two and ten calls a day, with Id say 3 or 4 being the median.

There are two sorts of calls-- actual spam calls that try and sell you something. And calls to verify a number is active-- these calls just are just silence, but if you pick up, your number will be added to a list of valid phone numbers and sold to spammers.

The spammers then take phone numbers and try to match them up with data breeches etc, or just cold call.

I don't think most people fall for these fraudulent calls, but the elderly are very vulnerable. I've helped several friends parents get control of their computers back after they willingly gave control of it to someone who who claimed to be from "Microsoft tech support" even though they had a mac.

Re:T-Mobile Confirms It Was Hacked by skissane on Monday August 16, 2021 @05:25PM (#28203194)
I get them frequently in Australia. Calls claiming (but likely faked with VoIP) to come from various places overseas, and from within Australia. I get a few different types:

a) Recently it has been computer voices leaving me voicemails claiming I've ordered thousands of dollars of stuff on Amazon, and I need to call some number to cancel the order

b) I got one guy claiming to be from a major ISP and saying my Internet was broken and he needed to help me fix it. I knew it was nonsense because I don't even use that particular ISP

c) Recorded messages claiming the Australian government is going to prosecute me for tax evasion, and if I just wait for the call centre operator to come online, they'll fix the matter for me by accepting payment of unpaid taxes

I think they are just dialling random numbers, looking for easily-tricked people.

Re:T-Mobile Confirms It Was Hacked by ASalazarMX on Monday August 16, 2021 @05:11PM (#28203041)
Mexico too. Before the pandemic I had a few spam calls a month, but now there were days when I received 20-50 from a misconfigured call center automatic caller.

It forced me to silence all calls from strangers. We have laws and a system to block and report spam callers, but it seems they don't work anymore.

Re:T-Mobile Confirms It Was Hacked by samstave on Monday August 16, 2021 @08:17PM (#28204603)
Do you recall that post where a guy was getting multiple scam callers and he was three-way-connecting them so they would spam-eachother-out... it might have been robo-calls... but he would pitt two spam/robos against eachother and have them rap-battle it out...
Re:T-Mobile Confirms It Was Hacked by ASalazarMX on Monday August 16, 2021 @11:55PM (#28206068)
I tried to find that, but couldn't. The closer I recall was a video where someone put Alexa and other assistant(s), and they kept telling each other they couldn't understand the request.
Re:T-Mobile Confirms It Was Hacked by brnt on Monday August 16, 2021 @05:04PM (#28202955)
Got it in France too all the time. Never in Switzerland or the Netherlands though.
Re:T-Mobile Confirms It Was Hacked by BrandoElFollito on Monday August 16, 2021 @06:18PM (#28203659)
I got maybe two calls in France in the last 10 years, from companies I am with (but still unsollicited)
Re:T-Mobile Confirms It Was Hacked by Bayart on Monday August 16, 2021 @10:31PM (#28205481)
In France I got one that I can remember of in all the time I've had this number, which is over ten years now. And it was an opinion poll. Also got 5 or 6 scam SMS.
Re:T-Mobile Confirms It Was Hacked by stordoff on Monday August 16, 2021 @05:16PM (#28203093)
I get spam texts fairly often in the UK, and I almost never give out my number, so no idea where they come from.

I also occasionally get calls from unknown numbers, which I don't answer, but if I look them up are usually associated with spam calls. My grandmother also gets them fairly often on her landline, usually of the "there is a problem with your computer" scam variety, but sometimes trying to sell her insurance for a random appliance.

Re:T-Mobile Confirms It Was Hacked by g_p on Monday August 16, 2021 @05:32PM (#28203241)
Fingers crossed, but I've not really had any spam issues on a few UK numbers.

I have even been quite generous in giving out one (i.e. using for any online stores that insist on a phone number), and I've yet to really have any unsolicited call that I can think of.

Phone numbers do get recycled by operators, so there's definitely some luck - I've seen some issues with landline numbers, specifically people trying to trace former users of the number. I imagine if you get "unlucky", you might really have little option beyond call blocking or trying to get a new number.

I did find it interesting that, at least for N=1, giving out your number fairly freely, including when you shop online (but not opting in to marketing etc) didn't seem to result in any issues, even after 8 years or so.

Re:T-Mobile Confirms It Was Hacked by S_A_P on Monday August 16, 2021 @04:49PM (#28202768)
Don't feel bad- Im on AT&T and Ive noticed a HUGE uptick in spam sms messages. Pretty sure my number was leaked in some breach.
Re:T-Mobile Confirms It Was Hacked by gruez on Monday August 16, 2021 @05:08PM (#28203012)
>Pretty sure my number was leaked in some breach.

Why do spammers need leaked phone numbers? Can't they just call/message every number?

Re:T-Mobile Confirms It Was Hacked by pininja on Monday August 16, 2021 @05:23PM (#28203168)
Calling, while cheap, isn’t free or infinitely fast. They’d likely pay for knowing “active” or “lucrative” numbers.

Jim Browning videos are a fantastic resource to learn more about the inner workings of scams https://youtube.com/c/JimBrowning

Re:T-Mobile Confirms It Was Hacked by yuy910616 on Monday August 16, 2021 @05:30PM (#28203229)
Calling isn't zero cost, and that spammer time isn't zero cost, so in this case, there is a incentive from the spammer to weed out people who costs the most.

So isn't the popular idea that you should NOT answer spam calls wrong? Logically, you should answer every spam call and try to get them to stay on the line for as long as possible, therefore maximizing their cost.

This is assuming they have some CMS software on the backend that allows them to categorize numbers.

Re:T-Mobile Confirms It Was Hacked by gruez on Monday August 16, 2021 @05:34PM (#28203260)
>Logically, you should answer every spam call and try to get them to stay on the line for as long as possible, therefore maximizing their cost.

You also have to factor in your costs as well. I checked a random VOIP service and they charge a penny per minute, or $0.60 per hour. The federal minimum wage is an order of magnitude higher at $7.25/hour. Therefore it's more expensive for you to stay on the line to mess with them.

Re:T-Mobile Confirms It Was Hacked by Nzen on Monday August 16, 2021 @05:36PM (#28203274)
There are systems to waste telemarketer time, ex lenny troll [0] (which acts like a senile person). While I used to answer in bad faith, I stopped given the realization that I am hurting people of lower economic standing more than the company that employs them.

[0] https://lennytroll.com/about.php

On the tangential topic of war dialing (calling every number as an exploration) I recommend checking this discussion https://news.ycombinator.com/item?id=27602383

Re:T-Mobile Confirms It Was Hacked by easrng on Monday August 16, 2021 @05:19PM (#28203129)
They can and do, but it's cheaper if they have a list so they can just text numbers they know get SMS.
Re:T-Mobile Confirms It Was Hacked by judge2020 on Monday August 16, 2021 @04:53PM (#28202818)
For what it's worth I've continued to report these to both AT&T[0] and Safe Browsing[1].

0: https://www.att.com/support/article/my-account/KM1051831/#:~....

1: https://safebrowsing.google.com/safebrowsing/report_general/

Re:T-Mobile Confirms It Was Hacked by dwighttk on Monday August 16, 2021 @05:25PM (#28203185)
I kinda wish Apple would let me mark voicemail as spam. They wouldn’t even really need to do anything with that info. Just delete the voicemail and maybe keep track of the number and if I mark the same number three times then block it.

I know I can block a caller, but I don’t know enough about how these scams work to know if blocking a number slows them down at all.

I just don’t let my phone ring ever so I don’t deal with too much of the spam. Every once in a while I open the phone app and see I have like 15 new voicemails. I’m guessing I do that once a month so they are just calling every other day.

Re:T-Mobile Confirms It Was Hacked by bbarnett on Monday August 16, 2021 @05:12PM (#28203047)
Or leaked once, when your phone number appeared on a phone, with an evil app installed.
Re:T-Mobile Confirms It Was Hacked by dheera on Monday August 16, 2021 @04:42PM (#28202690)
I get about 10+ spam calls a day, I just block all calls except for a couple of whitelisted numbers, and forward the rest to something that plays a hold song endlessly.
Re:T-Mobile Confirms It Was Hacked by capitainenemo on Monday August 16, 2021 @04:52PM (#28202803)
Sometimes I get calls from people I forget to whitelist or who might actually be important (workmen for example). So, I have my default phone ringtone set to a 0.1s, 200 byte mp3 of silence. Anyone in my address book gets my standard address book ringtone. Then I just check the emails of the voicemails once a day.
Re:T-Mobile Confirms It Was Hacked by sillystuff on Monday August 16, 2021 @09:53PM (#28205217)
I'm not sure if it is coincidence, or if it is really helping, but I play SIT code to indicate a number that is not in service at the beginning of my voice mail message. Since then, the number of spam calls I've been receiving has been steadily decreasing.

Install sox

play -q -n synth 0.2 sin 950;play -q -n synth 0.2 sin 1400;play -q -n synth 0.2 sin 1800

Re:T-Mobile Confirms It Was Hacked by bpicolo on Monday August 16, 2021 @08:24PM (#28204652)
I haven't gotten spam phone calls in 6-12 months. Today, I got 15.
Re:T-Mobile Confirms It Was Hacked by paulddraper on Monday August 16, 2021 @05:54PM (#28203439)
I've gotten lots of scam calls over the past 12 months, and lots more over the last 30 days.
Re:T-Mobile Confirms It Was Hacked by samstave on Monday August 16, 2021 @05:04PM (#28202957)
I get numbers from EU as well -- and I get some at ~3AM PST as well...