{"id":8043,"date":"2017-06-25T10:18:11","date_gmt":"2017-06-25T18:18:11","guid":{"rendered":"http:\/\/www.palada.net\/index.php\/2017\/06\/25\/news-1820\/"},"modified":"2017-06-25T10:18:11","modified_gmt":"2017-06-25T18:18:11","slug":"news-1820","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2017\/06\/25\/news-1820\/","title":{"rendered":"Got Robocalled? Don&#8217;t Get Mad; Get Busy."},"content":{"rendered":"<p><strong>Credit to Author: BrianKrebs| Date: Sun, 25 Jun 2017 15:24:16 +0000<\/strong><\/p>\n<p>Several times a week my cell phone receives the telephonic equivalent of spam: A robocall. On each occasion\u00a0the call seems to come from a local number, but when I answer there is that telltale pause followed by an automated voice pitching some product or service. So when I heard from a reader who\u00a0chose to hang on the line and see where one of these robocalls led him, I decided to dig deeper. This is the story of that investigation. Hopefully, it will inspire readers to do their own digging and help bury this annoying and intrusive practice.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignright size-full wp-image-39718\" src=\"https:\/\/krebsonsecurity.com\/wp-content\/uploads\/2017\/06\/robocall.png\" alt=\"robocall\" width=\"268\" height=\"334\" \/>The reader &#8212; Cedric (he\u00a0asked to keep his last name out of this story) had grown increasingly aggravated with the calls as well, until one day he opted to play along by telling a white lie to the automated voice response system that called him: Yes, he said, yes he definitely was interested in credit repair services.<\/p>\n<p>&#8220;I lied about my name and played like I needed credit repair to buy a home,&#8221; Cedric said. &#8220;I eventually wound up speaking with a representative at creditfix.com.&#8221;<\/p>\n<p>The number that called Cedric &#8212;\u00a0<a href=\"tel:(314)%20754-0123\" target=\"_blank\">314-754-0123<\/a>\u00a0&#8212; was not in service when Cedric tried it back, suggesting it had been spoofed to make it look like it was coming from his local area.\u00a0However, pivoting off of creditfix.com opened up some useful avenues of investigation.<\/p>\n<p>Creditfix is\u00a0hosted on a server at the Internet address 208.95.62.8. According to records maintained by <strong>Farsight Security<\/strong> &#8212; a company that tracks which Internet addresses correspond to which domain names &#8212; that server hosts or recently hosted dozens of other Web sites (the full list is <a href=\"https:\/\/krebsonsecurity.com\/wp-content\/uploads\/2017\/06\/DNSDB-208-95-62.8.txt\" target=\"_blank\">here<\/a>).<\/p>\n<p>Most of these domains appear tied to various credit repair services owned or run by a guy named <strong>Michael LaSalla<\/strong> and registered to a mail drop in Las Vegas. Looking closer at who owns the 208.95.62.8 address, we find it is registered to <strong>System Admin, LLC<\/strong>, a Florida company that lists LaSalla as a manager, according to <a href=\"http:\/\/search.sunbiz.org\/Inquiry\/CorporationSearch\/SearchResultDetail?inquirytype=EntityName&amp;directionType=Initial&amp;searchNameOrder=SYSTEMADMIN%20L130000426810&amp;aggregateId=flal-l13000042681-f57d5a4a-99f9-4b44-881f-b575a29e40a6&amp;searchTerm=SystemAdmin%2C%20LLC&amp;listNameOrder=SYSTEMADMIN%20L130000426810\" target=\"_blank\">a lookup<\/a> at the Florida Secretary of State&#8217;s office.<\/p>\n<p>An Internet search for the company&#8217;s address turns up <a href=\"http:\/\/apps.fcc.gov\/cgb\/form499\/499detail.cfm?FilerNum=831858\" target=\"_blank\">a filing<\/a> by System Admin LLC with the <strong>U.S. Federal Communications Commission <\/strong>(FCC).<strong>\u00a0<\/strong>That filing shows that the CEO of System Admin is <strong>Martin Toha<\/strong>, an entrepreneur probably best known for founding <strong>voip.com<\/strong>, a voice-over-IP (VOIP) service that allows customers to make telephone calls over the Internet.<\/p>\n<p>Emails to the contact address at Creditfix.com elicited a response from a Sean in Creditfix&#8217;s compliance department. Sean told KrebsOnSecurity that mine was the second complaint his company had received about robocalls. Sean said he was convinced that his employer was scammed by a lead generation company that is using robocalls to quickly and illegally gin up referrals, which generate commissions for the lead generation firm.<\/p>\n<p>Creditfix said the robocall leads it received appear to have been referred by <strong>Little Brook Media<\/strong>, a marketing\u00a0firm in New York City. Little Brook Media did not respond to multiple requests for comment.<\/p>\n<p>Robocalls are permitted for political candidates, but beyond that if the recording is a sales message and you haven&#8217;t given your written permission to get calls from the company on the other end, the call is illegal. According to the <strong>Federal Trade Commission <\/strong>(FTC), companies are using auto-dialers to\u00a0send out thousands of phone calls every minute for an incredibly low cost.<span id=\"more-39489\"><\/span><\/p>\n<p>&#8220;The companies that use this technology don&#8217;t bother to screen for numbers on the national <a href=\"http:\/\/www.donotcall.gov\/\" rel=\"noreferrer\" data-ss1498396344=\"1\">Do Not Call Registry<\/a>,&#8221; the FTC notes in <a href=\"https:\/\/www.consumer.ftc.gov\/articles\/0259-robocalls\" target=\"_blank\">an advisory<\/a> on its site.\u00a0&#8220;If a company doesn&#8217;t care about obeying the law, you can be sure they&#8217;re trying to scam you.&#8221;<\/p>\n<p>Mr. Toha confirmed that Creditfix was one of his clients, but said none of his clients want leads from robocalls for that very reason. Toha said the problem is that many companies buy marketing leads but don&#8217;t always know where those leads come from or how they are procured.<\/p>\n<p>&#8220;A\u00a0lot of times clients don&#8217;t know the companies that the ad agency or marketing agency works with,&#8221; Toha said. &#8220;You submit yourself as a publisher to a network of publishers, and what they do is provide calls to marketers.&#8221;<\/p>\n<p><strong>Robby Birnbaum<\/strong> is a debt relief attorney in Florida and president of the <strong>National Association of Credit Services Organizations<\/strong>. Birnbaum said no company wants to buy leads from robocalls, and that marketers who fabricate leads this way are not in business for long.<\/p>\n<p>But he said those that end up buying leads from robocall marketers are often smaller mom-and-pop debt relief shops, and that these companies soon find themselves being sued by what Birnbaum called &#8220;<a href=\"http:\/\/webrecon.com\/category\/fdcpa-case-statistics\/\" target=\"_blank\">frequent filers<\/a>,&#8221; lawyers who make a living suing companies for violating laws against robocalls.<\/p>\n<p>&#8220;It&#8217;s been a problem in this industry for a while, but robocalls affect every single business that wants to reach consumers,&#8221; Birnbaum said. He noted that the best practice is for companies to require lead generators to append to each customer file information about how and from where the lead was generated.<\/p>\n<p>&#8220;A lot of these lead companies will not provide that, and when my clients insist on it, those companies have plenty of other customers who will buy those leads,&#8221; Birnbaum said. &#8220;The phone companies can block many of these robocalls, but they don&#8217;t.&#8221;<\/p>\n<p>That may be about to change. The FCC\u00a0recently approved new rules that would let phone companies block robocallers from using numbers they aren&#8217;t supposed to be using.<\/p>\n<p>&#8220;If a robocaller decides to spoof another phone number \u2014 making it appear that they\u2019re calling from a different line to hide their identity \u2014 phone providers would be able to block them if they use a number that clearly can\u2019t exist because it hasn\u2019t been assigned or that an existing subscriber has asked not to have spoofed,&#8221; reads <a href=\"https:\/\/www.theverge.com\/2017\/3\/23\/15034556\/fcc-robocall-spoofed-number-block-list-proposal-vote\" target=\"_blank\">a story<\/a> at <em>The Verge<\/em>.<\/p>\n<p>The FCC estimates that there are more than 2.4 billion robocalls made every month, or roughly seven calls per person per month. The FTC received nearly 3.5 million robocall complaints in fiscal year 2016, an increase of 60 percent from the year prior.<\/p>\n<p>The newest trend in robocalls is the &#8220;<a href=\"http:\/\/www.cbsnews.com\/news\/ringless-marketing-calls-robocalls-voicemails-fcc\/\" target=\"_blank\">ringless voicemail<\/a>,&#8221;\u00a0in which the marketing pitch lands directly in your voicemail inbox without ringing the phone. The FCC also is considering new rules to prohibit ringless voicemails.<\/p>\n<p>Readers may be able to avoid some marketing calls\u00a0by registering their mobile number with the <a href=\"http:\/\/www.donotcall.gov\/\" target=\"_blank\">Do Not Call registry<\/a>, but the list appears to do little to deter robocallers.\u00a0If and when you do receive robocalls, consider\u00a0<a href=\"http:\/\/complaints.donotcall.gov\/\" target=\"_blank\">reporting them to the FTC<\/a>.<\/p>\n<p>Some wireless providers now offer additional services and features to help block automated calls. For example, <strong>AT&amp;T<\/strong> offers wireless customers its free <a href=\"https:\/\/www.att.com\/offers\/call-protect.html\" target=\"_blank\">Call Protect app<\/a>, which screens incoming calls and flags those that are likely spam calls.\u00a0See <a href=\"https:\/\/www.fcc.gov\/consumers\/guides\/stop-unwanted-calls-texts-and-faxes\" target=\"_blank\">the FCC&#8217;s robocall resource page<\/a> for links to resources at your mobile provider.<\/p>\n<p>In addition, there are number of third-party mobile apps designed to block spammy calls, such as <a href=\"https:\/\/www.nomorobo.com\/\" target=\"_blank\">Nomorobo<\/a> and <a href=\"https:\/\/www.truecaller.com\/\" target=\"_blank\">TrueCaller<\/a>.<\/p>\n<p><a href=\"https:\/\/krebsonsecurity.com\/2017\/06\/got-robocalled-dont-get-mad-get-busy\/\" target=\"bwo\" >https:\/\/krebsonsecurity.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><img decoding=\"async\" src=\"https:\/\/krebsonsecurity.com\/wp-content\/uploads\/2017\/06\/robocall.png\"\/><\/p>\n<p><strong>Credit to Author: BrianKrebs| Date: Sun, 25 Jun 2017 15:24:16 +0000<\/strong><\/p>\n<p>Several times a week my cell phone receives the telephonic equivalent of spam: A robocall. On each occasion the call seems to come from a local number, but when I answer there is that telltale pause followed by an automated voice pitching some product or service. So when I heard from a reader who chose to hang on the line and see where one of these robocalls led him, I decided to dig deeper. This is the story of that investigation. Hopefully, it will inspire readers to do their own digging and help bury this annoying and intrusive practice.<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10643,10642],"tags":[12780,11361,12781,10664,12782,12783,12784,12785,12786,10644,12787,12788,12789,12790,12791],"class_list":["post-8043","post","type-post","status-publish","format-standard","hentry","category-independent","category-krebs","tag-do-not-call-registry","tag-farsight-security","tag-federal-communications-commission","tag-federal-trade-commission","tag-little-brook-media","tag-martin-toha-voip-com","tag-michael-lasalla","tag-national-association-of-credit-services-organizations","tag-nomorobo","tag-other","tag-ringless-voicemails","tag-robby-birnbaum","tag-robocalls","tag-system-admin-llc","tag-truecaller"],"_links":{"self":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/8043","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=8043"}],"version-history":[{"count":0,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/8043\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=8043"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=8043"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=8043"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}