When I saw that this post was new I assumed they were talking about the newer phishing attack that involves phone verification where people with asterisk servers aggregate all the automated voice stuff from the real banks phone system and people can access their account in a similar manner seamlessly on a poisoned phone line.