[HN Gopher] TJ Maxx has been under a PBX hack for more than a month
       ___________________________________________________________________
        
       TJ Maxx has been under a PBX hack for more than a month
        
       A while back my wife called their main customer service number and
       got a gift card scamming operation. On their site they have this
       number 1 833-888-0776 listed for online customer service
       https://imgur.com/56WctZu. If you call it you either get the normal
       TJ Maxx welcome message and number tree but sometimes you hear a
       message like "please wait because the number may have changed" and
       then either a message about a gift card or press 1 for English and
       then it forwards to a credit scam call center. I called some of
       their technical staff last night and this morning but it is still
       happening as of me writing this post so I figure I need to post it
       publicly as well to get some publicity since this is really not ok.
       It seems probable that someone managed to put a number in the load
       balancing of their system and is shunting off a subset of calls out
       to another call center.
        
       Author : demonachizer
       Score  : 29 points
       Date   : 2022-03-24 18:51 UTC (4 hours ago)
        
       | toomuchtodo wrote:
       | https://us-cert.cisa.gov/forms/report
       | 
       | Maybe upload a recording of your call demonstrating what you've
       | described to Soundcloud and include that link in a report to the
       | above form.
        
       | johnmaguire wrote:
       | I had a very odd experience calling Ally Bank recently in which
       | the first time I called I was given completely unrelated options.
       | 
       | Upon dialing a second time, I got the normal prompt. It was the
       | exact same number.
        
       | rosndo wrote:
       | It's also possible that this is happening at a different stage of
       | call routing and that nothing is wrong on their end.
        
       | tenebrisalietum wrote:
       | "Load balancing" in a phone system is called "hunt groups". The
       | 800 number is probably set to forward to their call center which
       | is likely connected to some PBX.
       | 
       | It's possible one of the "Incoming Call Routes" in the company's
       | PBX is misconfigured.
       | 
       | Betting they may have stopped paying for a number to reduce costs
       | but forgot to take it out of their system - so it's going to the
       | number's new owner.
        
       | namecheapTA wrote:
       | I worked in sales for a company that requires salespeople text
       | customers through the CRM. If a customer tried to call the number
       | they were texting you, it went to a scam car insurance sales
       | operation.
       | 
       | I personally just faked all my texts for metrics and used my own
       | cell. But dozens of salespeople relied on this system. No one
       | really cared.
        
       ___________________________________________________________________
       (page generated 2022-03-24 23:02 UTC)