Phishing 2.0: The Rise of Bots Making Voice Calls to Override Two-Factor Authentication
The alarm was raised by an investigation carried out by Motherboard. The example is a scam that arises from a voice call with an automatic message that warns of a hypothetical attempted fraudulent use of the account PayPal. The recorded voice asks for an identity verification by entering a code to block the attempted fraud, but in reality it is the call itself that is the attempted fraud.
The verification made by the technicians of Motherboard it helps to understand the technique used for these new scam attempts. The recorded voice says: “To protect your account, enter the code we sent to your mobile device.” After entering the received six-digit string, the entry continues: “Thank you, your account has been protected and this request has been blocked” referring precisely to the imaginary attempted scam. He then concludes: “Don’t worry if a payment has been debited from your account – we will refund it within 24-48 hours. Your reference ID is 1549926. You can now hang up “.