The expert pointed out the risk of fraud due to the legalization of mass calls.
- Новости
- Internet and technology
- The expert pointed out the risk of fraud due to the legalization of mass calls.
Legalizing mass calls to inform subscribers can create a high risk of substitution. Kirill Levkin, Softline Group's project manager (MD Audit), warned about this in an interview with Izvestia. According to him, the attackers will begin to actively disguise themselves as a legitimate channel, since the format of "robocalls with important information" coincides with the scenarios of scammers.
At the same time, the expert drew attention to the key difference between legal notifications — the absence of interactive pressure. Relying only on behavioral signs, he pointed out, is no longer enough, as criminals quickly copy successful scenarios.
"There will be a key transition from SMS and push notifications to voice channels in situations where it is important to ensure that information is conveyed to the subscriber. This will expand the usage scenarios, but at the same time increase the burden on users' trust in voice communications," the specialist explained.
According to the forecast of the editorial interlocutor, we should expect an intensification of the "legitimate notification with continuation" scenario, when a person receives an allegedly official call that does not arouse suspicion, followed by a secondary contact with an attempt to lure data. Combined attacks pose a separate risk, where a call, SMS and push notification strengthen trust in each other, playing on blurring the line between a "service" and a "dangerous" call.
The specialist emphasized that the most effective solutions will be those operating at the infrastructure level: verification of numbers with the display of the confirmed name of the organization, voice tags, behavioral analysis and integration of operators with antispam platforms. Most of the basic mechanisms are already available, but their mass implementation is a matter of the next few years, so protection should shift from the level of an individual user to the level of the entire ecosystem.
Read more in the exclusive Izvestia article:
Given a reason: how scammers will use the permission for mass calls
Переведено сервисом «Яндекс Переводчик»