Home page logo

pen-test logo Penetration Testing mailing list archives

Re: listening to people/offices when on-hold on the phone
From: "rajat swarup" <rajats () gmail com>
Date: Tue, 26 Jun 2007 01:26:24 -0400

On 6/22/07, Robin Wood <dninja () gmail com> wrote:
Imagine the situation, you get a message to call someone, your call
gets answered by an automated system which says there may be a few
minutes wait and gives you the bad hold music. You hit the hands free
button on the phone and get on with work while you wait for it to be

Unless you mute the call, the person/system on the other end of the
call could be listening in while pretending to be on hold and
potentially hear all that is going on around you.

It is a random attack vector but it could allow an attacker to pick up
all sorts of information. I thought about it while sitting on hold for
over 30 mins trying to get through to my mobile phone support line
last night. If they had been listening they would know what I had for

There was an interesting presentation in last year's Black Hat Las
Vegas by Jay Schulman about a phone phishing set-up.  Thought you
might be interested.

Rajat Swarup.

This List Sponsored by: Cenzic

Are you using SPI, Watchfire or WhiteHat?
Consider getting clear vision with Cenzic
See HOW Now with our 20/20 program!


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]