Well it appears that someone has taken the whole idea of
phishing to another level; everyone say hello to voice/phone
phishing!
What makes this different from you’re more popular forms of
phishing is that instead of getting lured into clicking a link
leading to some sham site it uses a phone number! That’s right, you
heard me… a phone number. When users dial the number they receive
a voice recording asking them for their account details etc etc. If
you wanna hear the recording, listen here.
This new style of phishing is said to target customers of Santa
Barbara Bank & Trust (which is said to be the IRS tax refund
agent). Here’s a sample of what the email looks like:
Dear Customer,
We’ve noticed that you experienced trouble logging into Santa
Barbara Bank & Trust Online Banking.
After three unsuccessful attempts to access your account, your
Santa Barbara Bank & Trust Online Profile has been locked. This
has been done to secure your accounts and to protect your private
information. Santa Barbara Bank & Trust is committed to make
sure that your online transactions are secure.
Call this phone number (1-805-XXX-XXXX) to verify your account and
your identity.
Sincerely, Santa Barbara Bank & Trust Inc. Online Customer
Service
Credit goes to Websense Security Labs for finding and
reporting this somewhat new type of phishing.


