Caller ID Spoofing through TELUS [as demonstrated at H2K2]
by Lucky225

    Telus' toll-free "dial-around" is 800-646-0000, by simply calling this number with an ANI-fail you can give the operator 
any number as where you are calling from.  Telus is odd, in that they keep upgrading and downgrading there dial-around call 
center, you used to be able to call any toll-free number through the Telus operator and it would pass whatever number you 
gave the operator as ANI to the toll-free number you called, now it apears that they have new toll-free trunks that only 
pass ANI-fails to toll-free numbers, and you can not call MCI owned toll-free numbers for some reason either.  
Never-the-less, the ANI is still passed when you call a long distance number through Telus dial-around service and the ANI 
is also used as Caller ID So by simply causing an ANI-fail to Telus dial-around service you can spoof Caller ID to anyone 
you want to call, not only that if the person you are calling is in the same area as the number you are spoofing, the NAME 
and number shows up on the caller ID display. To cause an ANI fail to Telus all you have to do is op-divert to 800-646-0000 
or dial 10-10-288-0 and touch tone 800-646-0000 when AT&T comes on the line.

 You can social engineer the Telus operator to place "test calls" for you which is a free call w/ no billing, you simply 
tell the Telus operator at the beginning of the call that you are a "Telus technician" calling from [number to spoof] and 
need her to place a "Test call" to [number to call].  Telus is not the only telephone company that has this type of 
dial-around system, AT&T used this in the past though they didn't use spoofed ANI as Caller ID, and there are a few other 
phone companies out there besides Telus that you can also use this trick on.

  Of course, the social engineer will probably become ineffective in the following weeks to come, though it has been several 
weeks since H2K2 and I placed a few "test calls" just the other day.  However, the spoofed caller ID also shows up on 
collect calls(though I think you can only call people in Canada collect with this service), third party billing
(would you accept a third party bill call if the caller ID said your girlfriends number and the op said she was the one 
placing the call? :)), and calling card calls, so you could even legitamatily spoof Caller ID if you had a Telus calling 
card, however the rates are prtetty expensive, though you can get one if you have Telus as your local phone company or if 
you live outside Canada you can pay with a credit card, call 1-800-308-2222 to order one.

 The sad thing is that ANI spoofing and Caller ID spoofing is so easy, yet many companies use ANI and Caller ID as a 
security feature, for example I got a credit card in the mail once that the only verification you needed to activate it was 
to call from your "home phone".  It didn't ask for the last 4 of my SSN or anything else, had the card been mis-delivered 
to my neighbor or I accidently through it away anyone could have easily spoofed ANI and activated the card without me 
knowing it.  Hopefully this will make everyone more aware that ANI and Caller ID should not be relied on as where you are 
really calling from.