Technician Verification via SMS
Social engineering attacks by bad actors at an MSPs clients are increasing. Bad actors are imitating the MSP / IT Service Provider attempting to gain access to a computer, server or network. CDK Networks was breached recently and they leveraged that breach to immitate the MSPs/Service Providers by calling on the dealerships in attempts to gain access to client computers and networks. The purpose for Technician verification is for the client of the IT company or service provider to verify the support company is legitimate before allowing access to their computer systems or providing sensitive information without verifying the caller. Typically, the systems available today provide a mechanism for the IT company verifying the end user calling in for IT support. This would be providing that same capability but in reverse. The process could not be more simple. When you signup you receive a Verification Phone number. You simply provide this to all of your existing clients and let them know they can request a verification via SMS to it.- The user sends a #verify message to the number you have provided to them.
- Each party is sent a randomly generated 6-digit code.
- The Technician provides the code to the end-user and assigns the verification to the ticket in progress for tracking.
- The end-user types #confirm to the same number to confirm the verification was successful.
- The user receives back an automated message showing the verification was completed successfully.

