Email or username:

Password:

Forgot your password?
Terence's posts Post Back to profile
Top-level
:mastodon: Ric Harvey πŸ‡ͺπŸ‡ΊπŸŒπŸ’š

@Edent did they send that via text or in the actual chase app? If it's via text it's still a pretty sophisticated scam!

2 May at 16:24 | Wall-to-wall | Open on awscommunity.social
4 comments
Terence Eden
:mastodon: Ric Harvey πŸ‡ͺπŸ‡ΊπŸŒπŸ’š
@infosec_jcp πŸˆπŸƒ done differently

@Edent @Ric

This speaks to a CNE either in app being targeted or #StateSponsoredMalware already on the phone and this is just the #SSMβ„’ being used with a phone call to get you to authorize and give passcode to scammers for later banking behind the scenes. Alert the Chase Bank 🏦 via the number on the back of the card and cease using the banking app until you clear the SSM off you phone.

Banking Class security doesn't deal with SSM very well in my experience. Alerting them CAN help their fraud department and let them know to monitor so monitor your in/out on your accounts and look for anomalies like recurring charges, cloned card behavior using gas stations and ATM 🏧 off bank.

@Edent @Ric

This speaks to a CNE either in app being targeted or #StateSponsoredMalware already on the phone and this is just the #SSMβ„’ being used with a phone call to get you to authorize and give passcode to scammers for later banking behind the scenes. Alert the Chase Bank 🏦 via the number on the back of the card and cease using the banking app until you clear the SSM off you phone.

2 May at 19:43 | Open on infosec.exchange
Terence Eden

@infosec_jcp @Ric
It isn't SSM. It isn't a vulnerability in the app. Read the rest of the thread.

2 May at 19:46 | Open on mastodon.social
Go Up