In November 2005, Barclay's was reportedly hit by a "phax" attack. The criminals sent out faxes to Barclay customers asking them to fax in personal information to the bank's fax which actually was the criminal's fax. The fax purportedly and ironically had all sorts of good tips on how to avoid web based phishing attacks.
Now, in April 2007, phaxing has reappeared. This time criminals sent out faxes asking people to logon to the internet and providing them with a url to do so. This is phax phising thus called "phaxing".
Criminals always are looking for social engineering ways to dupe a user. Beware of receipt of faxes with a url in them asking you to contact them via the internet. Always call up the enterprise, using a number from the phone book, to confirm they sent the fax before responding via the internet. If you don't, then there's a good chance of having your identity and authentication information stolen and your bank account rifled.
Guy
www.authenticationworld.com
guy.huntington@authenticationworld.com
del.icio.us