Security Information

Dialing Up a Scam: Avoiding the Auto-Dialer Virus


For many, the daily walk to the mailbox evokes mixed feelings: The glee that your favorite monthly magazine - or a friend's hand-written letter (quite a surprise in the e-mail age) may be waiting is countered by anxiety of how many bills the postman left you.

Now, imagine coming across your phone bill, thicker and heavier than normal. When you open it, instead of "statement stuffers" from the phone company's marketing department, the bill is dozens of pages long ending in a one-month total of almost $5,400.

A quick glance at the details reveals hundreds of calls to the same 1-900 number. "A mistake," you insist. After all, you're the only person in the house and you have never called a 900 number before. Actually, this is no mistake. In this true story, the homeowner had fallen victim to one of the oldest computer scams around: the "Auto-Dialer" virus.

How Did This Computer Security Nightmare Begin
-----------------------------------------------------------
What is an "auto-dialer"? Some time ago, the phone companies came up with a feature that allowed merchants to reach a broader range of customers by allowing consumers to make payments via your phone bill. If you did not have a credit card, you just dialed a 900 number, connected by voice or modem (for Internet sites). Every minute you used the service, you were charged a fee ranging from $1 to $5 or more per minute. At month's end, the charge appeared on the phone bill. Many services were legit: Consumers called weather, horoscope and gambling services offering this feature. But many merchants sold expensive phone or online adult content.

How Did An Auto-Dialer Get Installed
-----------------------------------------------------------
But how did $5,400 in charges end up on the person's phone bill? Although many of these services require the user to physically dial the number or connect to the online site by instructing the modem to dial the number, this can happen without the user's knowledge. In the above case, the person's computer was infected with an auto-dialer virus. Somewhere during his Web travels, he connected to a site that popped up a rather confusing message instructing him to "Hit OK" to make the message go away. What this person didn't know was he was agreeing to download,install, and execute an adult content auto-dialer.

Behind the scene, the auto-dialer installed itself, checked for the presence of a modem and dial tone, and then proceeded to dial an overseas 900 number over and over again. Even though the person surfed using an always-on broadband Internet connection, the modem remained so he could send and receive faxes. One problem: When he wasn't using the modem, it remained plugged into the phone jack. Why should he have unplugged it? It's not like it could hurt anything, right? Wrong.

How To Protect Yourself
-----------------------------------------------------------
Unfortunately, there is no single solution to avoid these types of malicious acts. A short list of protective measures would include:

1) If you no longer need a modem in your computer, remove it. Or at least disconnect the phone line from the modem;

2) Install anti-virus software such as Trend Micro or Symantec's Norton Anti-Virus. Many are designed to prevent this kind of malicious software, or "Malware." More importantly, make sure your subscription for new virus patterns is current and configured to automatically download and install updates;

3) Install and regularly run Adware protection solutions such as LavaSoft's Ad-Aware or SpyBot Search & Destroy;

4) And do not, under any circumstances, blindly hit "OK" to pop-ups or similar annoyances without first making sure what you are agreeing to.

This tale is not fiction; in fact, it happens frequently, to businesses and consumers, kids and adults. But even the least savvy among us can thwart such an attack. A neighborhood teenager recently avoided potentially thousands in fees when an auto-dialer was downloaded and installed. How? She had unplugged the modem.


About The Author
----------------
Darren Miller is an Industry leading computer and internet security consultant. At the website - http://www.defendingthenet.com you will find information about computer security specifically design to assist home, home business and small business computer users. Sign up for defending the nets newsletter and stay informed and empowered to stay safe on the Internet. You can reach Darren at mailto:darren.miller@paralogic.net or at mailto:defendthenet@paralogic.net
URL
---
http://www.defendingthenet.com/NewsLetters/Auto-Dialer-Newsletter.htm


MORE RESOURCES:

National Post

UN Security Council urges int'l action to fight Somalia piracy
Xinhua, China - 4 hours ago
UNITED NATIONS, Oct. 7 (Xinhua) -- The UN Security Council voted unanimously on Tuesday to urge states to deploy naval vessels and military aircraft to ...
New Somalia piracy resolution adopted at UN AFP
Somalia: Security Council Asks Nations With Military Capacity In ... AllAfrica.com
UN calls for action to fight pirates off Somalia GMA news.tv
ReliefWeb (press release) - UN News Centre
all 124 news articles


Homeland Security Capital Corporation Awarded $3.1 Million ...
WELT ONLINE, Germany - 2 hours ago
HSCC is an international provider of specialized technology-based radiological, nuclear, environmental, disaster relief, and security solutions to ...


Public Invited to Download Free Security Awareness Materials ...
MarketWatch - 9 hours ago
The materials are available on the new Cyber Exchange http://cyberexchange.isc2.org/, an online security awareness resource center launched in support of ...


Jerry L. Pettis Memorial VA Medical Center Awards $200000 Security ...
MarketWatch - 2 hours ago
By deploying BrightSite, the Jerry L. Pettis Memorial VA Medical Center will be able to unite more than 21 individual security systems into an integrated ...


SECNAP Network Security Names Jim Garrity Vice President of Sales ...
MarketWatch - 9 hours ago
Garrity will assume responsibility for the company's award-winning network security product suite and email security solutions, offered exclusively through ...


FaceTime Unified Security Gateway Named Best Anti-Malware Gateway ...
MarketWatch - 5 hours ago
has awarded FaceTime Communications' Unified Security Gateway (USG) top honors in its recent live testing and review of the secure Web gateway appliance. ...


New York Times

Palin Rips Obama on Social Security 'Fear and Panic,' but Tangles ...
Washington Post, United States - 1 hour ago
John McCain's Social Security views, continuing her criticism of the Democratic nominee. "Beware! No presidential election cycle is complete without the ...
Palin: Obama's trying to scare seniors MSNBC
all 1,452 news articles


Argyle Security Unit Secures $25 Million Of Debt Financing
Trading Markets (press release), CA - 2 hours ago
Argyle Security USA unit, which does business as ISI Security Group, Inc., entered into a loan agreement with The PrivateBank and Trust Co. ...
» ALL ASIA LICENSING Press Release Financial News USA (press release)
Chi Steps Down As CFO Of Cavico Trading Markets (press release)
Royal Caribbean To Sell Island Cruise Interest Trading Markets (press release)
Trading Markets (press release) - Trading Markets (press release)
all 48 news articles


CyberPatrol Recognizes National Cyber Security Awareness Month ...
MarketWatch - 10 hours ago
ENOLA, Pa., Oct 07, 2008 (BUSINESS WIRE) -- In recognition of National Cyber Security Awareness Month, CyberPatrol LLC today announced its Online Safety ...


Dangerous spent fuel returned to US
The Associated Press - 7 hours ago
The National Nuclear Security Administration said the spent fuel shipment was transported by ship and rail under secret and secure conditions. ...

Security - Google News

home | site map
© 2006