jfkmk wrote:
....Do not call is absolutely worthless! Before you say it, Iโd love to drop the land line, but my wife insists on having it...
So many things to comment on here...
1) I had a virtual machine stood up and ready to go for when they called. I took them for 2 hours, stringing them along. They are VERY GOOD at their
social engineering attack. They will try to get you to change a setting or install some software on the computer. Even doing something like revealing a piece of information can be used against you in a follow-up targeted attack. The name of a family member, the operating system on the computer, etc, can all be used later on. A social engineering attack can be much more convincing when they open with
"Hi Mary. Bob told me to give you a call to help you figure out the problems with your Windows 10 computer".2) Two is one, and one is none. Keep the land line. Cell phones could go out in a disaster, and you will be very happy you have a POTS line (Plain Ol' Telephone Service). Or vice versa.
3) Any information you provide to the scammers is useful. Someone picked up the phone?? It's a live number, make a note and call again.
The trick is to make yourself to not be the target. It helps that I work from home as I always answer unknown Caller ID numbers with
"Good afternoon, this is Eric" like I am talking on a work phone line. If it is still not someone I recognize, I treat it like they have called a work phone at an office.
"Yes, this is Eric, how can I help you?" If they say something about the computer, I will counter with
"Thanks for calling me back. Yes, I have been having problems with it. Can you confirm you are with the IT department as they normally call on an inside phone line." About that point they will hang up.
The key here is I made them think this is a business phone line. That is not who they are targeting. Sometimes they will right out ask
"Is this a business? to which I will respond with
"Yes, it is. How can I direct your call?" Over time I have seen a reduction in scammer calls because it is eventually moving me from a home phone number to a business phone number on the scammer's call lists.4) Profanity, threats, hang ups, all confirm that they have reached a live phone number. They know someone answers the phone and the next time it may be a different person who is more susceptible to social engineering. It is all a numbers game. If 0.1% of people fall for it and give up a credit card number, then simply make 1000 calls to find a winner. A robo-calling system can knock that, with a connection and hang-up being a quick turn-around. I'll bet one scammer can burn through 1000 hang-ups a day to get to that one winner that gives them a payday. Even if my WAG numbers are completely off, the math still adds up to be profitable which is why they keep doing it.
5) Never, ever, give out any information over the phone on an unsolicited call. If it sounds legit, look up the business on the Internet or phone book. Call back that phone number. Do not trust the Caller ID as that system can be manipulated.
Stay safe, vigilant, and smart!
-Eric
Eric & Lisa - Oregon
'97 Silverado K2500, New HT383 motor!, Airbags, anti-sway bar
'03 Lance model 1030, generator, solar,