Hey #OPSEC and #Infosec folks…. Something weird happened to a friend and I want a second opinion. This weekend, they received a creepy message from an unknown phone number from the same area code that said….
“Hey , [Firstname] did I just see you crossing [major street in their neighbourhood]?”
Clearly, the person who sent it knew their name, approximate location where they lived, and their mobile phone number, and provided zero info about who they were, and never followed up.
To me, this feels like some sort of confirmation attack — verifying the number is active, the name and location of the recipient….
Is this a known thing, or is my OPSEC dial turned up too far?
Edit: Angle brackets replaced with square brackets…. Damn HTML.
EDIT2: After some digging on the incoming number, it turns out it was someone they hadn't heard from for 5+ years. So yeah, my OPSEC dial was turned a little too far.