setup-inbound

This is an IVR configuration that collects banking credentials. The fragment contains no direct malware implementation or exfiltration mechanism, but collecting a customer PIN and routing it to an agent is a high-risk credential-harvesting pattern and should not be deployed without strong authorization, consent, secure handling, and compliance controls.