By Joris Evers
Friday, April 28 2006 01:54 PM
URL: http://www.zdnetasia.com/news/security/0,39044215,39355262,00.htm

In a new twist on phishing, fraudsters are sending out e-mail that attempt to trick people into sharing personal information over the phone.

Cloudmark, a San Francisco-based e-mail security company, said it has seen two separate attacks this week. In both cases, the spammed message warns of a problem with a bank account and instructs the recipient to dial a phone number to resolve it, the company said in a statement published Wednesday.

The caller is connected to a voice response system that is made to sound exactly like the bank's own system, Cloudmark said.

"The phone system identifies itself to the target as the financial institution and prompts them to enter account number and PIN," Cloudmark said.

"The result can be personally financially devastating," Adam O'Donnell, the senior research scientist at Cloudmark, said in the statement.

Phishing scams are prevalent and continue to proliferate. In traditional scams, miscreants try to pilfer personal information by sending spam e-mail with links to a malicious Web site, crafted to look like a site belonging to a trusted service provider. The phone scams are a new twist, made possible by cheap Internet-based telephone services, Cloudmark said.

Antispam technology can block the e-mail scams, Cloudmark said. The company urged people who do receive the messages to notify their service providers immediately. As a precaution, people should not dial phone numbers received in an e-mail message and should double-check and dial the numbers printed on ATM and credit cards instead, it advised.