Fortify Software: Fortify says $52,000 hacker phone bill proves timely warning to firms to protect their PBX IT resources
TMCnet
TMC Launches New Sites ::  NGC  |  4GWE  |  Green Tech  |  Satellite  |  IT |  IVR |  ITEXPO SHOW NEWS  |  Healthcare  |  Cisco News  |  Skype News  |  Microsoft News  |  AVAYA News
  INDUSTRIES
  VERTICALS
  HORIZONTAL
  PUBLICATIONS
  FREE RESOURCES
  INTERNATIONAL
  EVENTS
  ABOUT TMC
  COMMUNITIES
Share
TMCnews
[December 23, 2008]

Fortify Software: Fortify says $52,000 hacker phone bill proves timely warning to firms to protect their PBX IT resources

Dec 23, 2008 (M2 PRESSWIRE via COMTEX) --
Fortify Software, the application vulnerability specialist, says that reports of a US firm being hit by $52,000 phone bill after hackers gained unauthorised access to the company's PBX, is a timely warning to all organisations to protect their telephony resources.



"The advent of IP-enabled PBXs, and the facility of remotely- programmable 'conventional' PBX systems, means that hackers can - with sufficient time and access - rack up large phone bills on the unfortunate victim's account," said Robert Rachwald, Fortify's director of product marketing.

"And with the holiday shutdown looming, this is the perfect time for hackers with time on their hands, to crack a firm's PBX and engage in more than a little phone call resale fraud," he added.



According to Rachwald, this time of year is one of the busiest periods for phone companies on the international call front, with the result that international call resale fraud is also at its highest.

The fact that HUB Computer Systems in the USwas hit by a phone bill for $42,359.59 in calls to Bulgaria, he says, illustrates the demand for fraudulent international calls.

Once a hacker has reprogrammed a company PBX to allow free dial- through international calls, one or more people act as 'human operators,' accepting payments - always in cash - and then allow callers to place international calls at a heavy discount to their chosen destination.

"The modus operandi is always the same - the hackers stand at known meeting and gathering points for international visitors in a given city and then announces they are offering calls home, typically via prepay mobile phones, for a fraction of the normal costs. After that, they simply rake the money in - probably around $5,000 to $10,000 in the case of the HUB Computer Systems telephone hack," he said.

"As firms prepare for the holiday shutdown, IT staff should take extra care to protect their company PBXs, as well as their firm's IT resources, shutting down systems that are unlikely to be used. Locking down the ability to reprogram the system remotely has to be high on the list of holiday period checklists," he added.

For more on the $52,000 hacked phone system saga: http://tinyurl.com/6vkcut
CONTACT: Yvonne Eskenzi
Tel: +44 (0)20 71832 832
Tel: +44 (0)7961 394 461
e-mail: Yvonne@eskenzipr.com
Fortify Software
WWW: http://www.fortify.com
M2 Communications Ltd disclaims all liability for information provided within M2 PressWIRE. Data supplied by named party/parties. Further information on M2 PressWIRE can be obtained at http://www.presswire.net on the world wide web. Inquiries to info@m2.com.

[ Back To TMCnet.com's Homepage ]


Discussions:
Enterprises have long protected every connection to the Internet with firewalls and related applications for IDS, IPS, DLP, etc. Ironically, the more numerous connections to the public phone network were traditionally left unsecured.

Lately, leading government and commercial enterprises have recognized this irony and are deploying VOICE firewalls on every connection to the public telephone network (on both legacy TDM and newer IP connections) to prevent attacks of the data network via voice devices, and attacks of the voice network for toll fraud, threatening calls, fax spam, voice mail access, Denial of Service, etc.

Additionally, thanks to the per-call granularity and control afforded by voice firewalls, enterprises are also enjoying substantial hard $ savings in the telecom service and operating costs – beyond the saving from fraud avoidance.

-- Rick Jordan Co-Founder and CFO SecureLogix Corporation
 
1/12/2009 3:04:57 PM
Featured White Papers
Top Stories
Related VoIP News

Subscribe FREE to all of TMC's monthly magazines. Click here now.