Finance worker pays out $25M after VC with deepfake CFO

Re:Finance worker pays out $25M after VC with deepfake CFO by p_l on Sunday February 04, 2024 @06:35AM (#39249468)

If you can get S7 link with Telco, in most cases it's trivial to spoof Caller ID signals, as those are essentially forwarded from originating network. Getting direct S7 link isn't as hard as it sounds, it's IIRC common thing if yo want to run VOIP provider.

Your telco's NOC can at best track what "port of entry" the call came from but can't force the Caller ID go be truthful.

[ Parent | on HN ]

Re:Finance worker pays out $25M after VC with deepfake CFO by xur17 on Sunday February 04, 2024 @08:19AM (#39249966)

I imagine it has changed, but 10-ish years ago I recall having a cheap VoIP account that just let me enter whatever phone number I wanted as the caller ID.

[ Parent | on HN ]

Re:Finance worker pays out $25M after VC with deepfake CFO by p_l on Sunday February 04, 2024 @09:38AM (#39250502)

It's very much a "honor system". If VoIP provider doesn't do due diligence, the other networks can't really check the value, especially since number porting became norm

[ Parent | on HN ]

Re:Finance worker pays out $25M after VC with deepfake CFO by MichaelZuo on Sunday February 04, 2024 @10:44AM (#39251107)

For the first few dozen times sure, but after the hundredth or so report of a scam call associated with a spoofed number, the VoIP provider should be blocked by the telco. That is if they were allowed to do so.

[ Parent | on HN ]

Re:Finance worker pays out $25M after VC with deepfake CFO by p_l on Sunday February 04, 2024 @12:41PM (#39252424)

"should" is doing a lot of heavy lifting in that statement :)

[ Parent | on HN ]