News for hackers. Stuff that matters.
Re:How to Lose a Fortune with Just One Bad Click by Majromax on Friday December 20, 2024 @08:39AM (#42470963)
> Calling back the possibly spoofed number

Don't call back the number possibly being spoofed (i.e. using your Caller ID as the source of the callback number). Call an independently-listed number for the company, such as the phone number on the back of a credit or debit card. Using an independent number prevents any failures where the Caller ID correctly reports an attacker-controlled but plausible-sounding number.

For extra paranoia and safety, perform the callback from a separate phone line. That would avoid at least some of the more-targeted attacks involving a compromise of the victim's phone connection, which could potentially allow the attacker to redirect outgoing calls.

Re:How to Lose a Fortune with Just One Bad Click by 01HNNWZ0MV43FF on Friday December 20, 2024 @01:38PM (#42473581)
"Hang up, look up, call back"