Impersonation - CompTIA Security+ SY0-701 - 2.2

Understanding Impersonation in Scam Calls

Overview of Scam Calls

• The discussion begins with an exploration of various scam calls, emphasizing that these are real examples sourced from YouTube videos and likely resemble calls received by the audience.

Examples of Scam Calls

• A caller introduces themselves as "Wendy from Microsoft Windows," claiming to conduct an urgent checkup on the recipient's computer, which is a common impersonation tactic.

• Another example involves a voicemail stating it’s an enforcement action by the US Treasury, highlighting poor grammar and implausibility as red flags.

• A third call congratulates the recipient on their payment history while offering 0% interest rates, further illustrating deceptive practices in financial scams.

Mechanisms of Impersonation

• Impersonation is defined as attackers pretending to be someone else to gain trust. They may claim to be from a help desk or hold high-ranking positions within an organization.

• Attackers often use technical jargon or authoritative titles to distract victims and encourage them to share sensitive information without skepticism.

Goals of Attackers

• The primary aim for attackers is to elicit confidential information such as credit card numbers or Social Security numbers through crafted narratives that seem legitimate.

• Attackers typically do not directly ask for sensitive data; instead, they create scenarios where sharing this information appears necessary.

Identity Fraud Tactics

• Beyond voice phishing (vishing), impersonators may engage in identity fraud by using stolen personal information to open accounts in the victim's name.

• An example includes opening credit cards under someone else's name but using the attacker’s address for delivery, leading to unauthorized purchases.

Consequences of Identity Theft

• Attackers can also establish bank accounts using stolen identities, facilitating illegal activities like loan applications under false pretenses.

• Tax fraud is another consequence where attackers file tax returns using stolen identities, receiving refunds before the actual individuals can claim them.

Prevention Strategies Against Impersonation

• To prevent falling victim to impersonation scams, individuals should refrain from volunteering personal information over phone calls or emails.