Slashdot Mirror
Caller ID Spoofing Becomes Easy
objekt writes "According to an article in USA Today, Caller ID spoofing has become much easier in the last few years. Millions of people have Internet telephone equipment that can be set to make any number appear on a Caller ID system. And several websites have sprung up to provide Caller ID spoofing services, eliminating the need for any special hardware. For instance, Spoofcard.com sells a virtual 'calling card' for $10 that provides 60 minutes of talk time. The user dials a toll-free number, then keys in the destination number and the Caller ID number to display. The service also provides optional voice scrambling, to make the caller sound like someone of the opposite sex."
The original article is testing out the spoofing services.
It's a small world and it smells funny; I'd buy another if it wasn't for the money; Take back what I paid (SoM)
During a pen-test to social engineer a user into changing her proxy setting to a server that we "owned". While caller ID spoofing might not fool you, the "masses" actually do use it as a forum of "authenication". For example, we called as a major telco representive claiming that we had reports of "slow Internet traffic" from there site. The caller ID spoofing was enough to fool the employ to do pretty much anything we asked.
Many, many people believe spoofing is a valid forum of "making sure".