[AusNOG] New/old CBA scam

[Chris Hurley]

Thanks to everyone hadn¹t thought of CBA Security I¹ll call them tomorrow.
The card has already been cancelled to be safe.
As I said I just happened to be visiting my Dad and he was on the phone to
the scammers and had already installed TeamViewer so I have no idea if the
link was dodgy or genuine. I walked in as he was giving out his PIN number
something I¹ve told him a million times no organisation will ever ask for.
So just pulled his ethernet cable out as the screen was going black. As the
operator was saying we¹ll install monitoring software as you don¹t have any
anti-virus software. Yep right.


On 21/08/13 7:12 PM, "Joshua D'Alton" <joshua at railgun.com.au> wrote:

> 1) CBA security always the best approach, the issue will actually be looked
> at, vs even AFP and even scamwatch it just goes onto the pile
> 2) If they had full access to teamviewer it only takes literally a milisecond
> for them to infect the PC, so while format might be a bit extreme, I'd
> definitely be paranoid about being compromised. cancelling the card is
> probably a bit extreme but lacking in details, i guess if it was creditcard
> and they had all pertinent information to use it.. good call.
> 
> 
> On Wed, Aug 21, 2013 at 6:59 PM, Peter Tiggerdine <ptiggerdine at gmail.com>
> wrote:
>> 
>> Interesting the number does get answered. By whom I was prepared to ask.
>> 
>> On 21/08/2013 6:53 PM, "Geoff Northcott" <geoff.northcott at miraz.com> wrote:
>>> If you want help in dealing with it then contact CBA Group Security, let
>>> them manage the police involvement...if it's a wide spread problem then they
>>> will probably already have a case running.
>>> 
>>> 
>>> On Wed, Aug 21, 2013 at 6:31 PM, Robert Hudson <hudrob at gmail.com> wrote:
>>>> Hi Chris,
>>>> 
>>>> State police are probably seemingly unwilling because they know that in
>>>> reality they have zero chance of every catching or prosecuting the people
>>>> running these scams due to jurisdictional issues.
>>>> 
>>>> Scamwatch or AFP would be a good start.
>>>> 
>>>> Regards,
>>>> 
>>>> Robert
>>>> 
>>>> 
>>>> On 21 August 2013 18:19, Chris Hurley <chris at minopher.net.au> wrote:
>>>>> Hi all,
>>>>> 
>>>>> As the authorities seem either unwilling or unable to help thought I would
>>>>> pass on a new scam that hit my Dad today, fortunately I walked in the
>>>>> middle of it and pulled the cable.
>>>>> 
>>>>> "indian" sounding call centre rings saying We are from the CBA bank and
>>>>> seeing a $700 transaction going to New Zealand. We are holding it until
>>>>> you give your approval. But we think you've been hacked please let us
>>>>> install Team Viewer so we can load monitoring software. If you have any
>>>>> doubts call 1800429339 <tel:1800429339>  (which always rings out).
>>>>> 
>>>>> Then they proceed to trick credit card number and PIN.
>>>>> 
>>>>> While I pulled the network cable while team viewer was running and have
>>>>> ran a full system scan thinking a reformat and install might be the best
>>>>> option?
>>>>> Already called the Bank to cancel the card. Police were very uninterested
>>>>> in following this up, suggested Scamwatch. 
>>>>> 
>>>>> 
>>>>> 
>>>>> Regards,
>>>>> 
>>>>> Chris Hurley BE (Elec), MBA
>>>>> Director
>>>>> 
>>>>> 
>>>>> ******************************************************
>>>>>  Minopher Pty Ltd     Phone: 1300 730 531 <tel:1300%20730%20531>         
>>>>>  15 Nevana Street     Fax: +61-3-9763 3309 <tel:%2B61-3-9763%203309>     
>>>>>  Scoresby,  3179 Victoria                                          
>>>>>  
>>>>> Australia                                                                 
>>>>>        
>>>>> ******************************************************
>>>>> 
>>>>> 
>>>>> _______________________________________________
>>>>> AusNOG mailing list
>>>>> AusNOG at lists.ausnog.net
>>>>> http://lists.ausnog.net/mailman/listinfo/ausnog
>>>>> 
>>>> 
>>>> 
>>>> _______________________________________________
>>>> AusNOG mailing list
>>>> AusNOG at lists.ausnog.net
>>>> http://lists.ausnog.net/mailman/listinfo/ausnog
>>>> 
>>> 
>>> 
>>> _______________________________________________
>>> AusNOG mailing list
>>> AusNOG at lists.ausnog.net
>>> http://lists.ausnog.net/mailman/listinfo/ausnog
>>> 
>> 
>> _______________________________________________
>> AusNOG mailing list
>> AusNOG at lists.ausnog.net
>> http://lists.ausnog.net/mailman/listinfo/ausnog
>> 
> 
> 
> 
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20130821/3e847d05/attachment.html>