Streamyx Customer Care vulnerable to social engineering-based attacks

Advertisement

Do you know that the simple security measure is from Streamyx?
Do you know that you can pretend to be someone when you call to Streamyx?
Do you know that people easily can get your personal information simply by calling Streamyx?

Owh you don’t believe it? So why don’t you try?

Ok first of all, you need to have username. Just think of any username that might be registered to Streamyx and then pick up your phone and start calling 100 or 1300888123 if from other OLNOS.
Then Streamyx agent will pick up the call and start greeting. Let’s start.

Streamyx Agent: Thank You for calling TM (agent) speaking, how may i assist you?
Customer: My username is “whatsoever” (just think any of username that you might think it exist).
Streamyx Agent: Let me repeat back, your username is “whatsoever”.
Customer: Yes.
Streamyx Agent: Before we proceed, I need to do some verification, am I speaking to Mr A?
Customer: Yes.
Streamyx Agent: Mr A, is your contact number is 01X-XXXXXXX.
Customer: Yes (so do you got the number?)
Streamyx Agent: Alright, May i know what are the issue?
Customer: I need to check whether my billing address is updated or not? Could you tell me inside your system what is my current address.
Streamyx Agent: Let me check first Mr A, in my system shows that your billing address is XXXX. (so do you have the address? want to proceed more?)

* So still don’t believe in what i said? it’s all up to you to decide. Just another tips for you guys!

This entry was posted in Streamyx. Bookmark the permalink. Trackbacks are closed, but you can post a comment.

7 Comments

  1. ZenGothic
    Posted February 28, 2008 at 7:08 pm | Permalink

    Social-engineering is one of the hackers popular techniques to gain info from the target.

  2. Posted May 4, 2008 at 1:34 pm | Permalink

    ur right…
    but still i have no coment on that..
    depend on Streamyx laa…

  3. PejaL
    Posted May 15, 2008 at 4:29 pm | Permalink

    Depends on people that assist you(customer)

  4. tmadmin
    Posted May 30, 2008 at 5:11 am | Permalink

    Actually, they cannot read the billing address. If u want to know.
    If u want to know that, they will ask the registered name,. ic number, and the service number. If u failed to give that information, they wont read.

  5. pijut82
    Posted June 16, 2008 at 10:54 am | Permalink

    tmadmin
    >> if i twist my word like this * i just want to know with you my billing address since your TMnut bill are not being sent to me every month! and for *tut* what is my billing address?*
    can i have it?

  6. wan azli
    Posted February 7, 2010 at 1:17 am | Permalink

    Firstly you are totally wrong..for tehnical support youcan get freely but for account info such as billing address they will asked security question such as ic, full name etc
    Based on your statement I believe you are working w ith streamyx competitor or against the streamyx

    • pijut82
      Posted February 18, 2010 at 3:07 pm | Permalink

      may be to improve better on their call center?

Post a Comment

Your email is never published nor shared. Required fields are marked *

*
*

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>