by Jeff Lytle
In today's world, staying up to date with the latest security measures is a necessity. Hackers are using new tactics and strategies to gain access to your phone system and causing you and your guests harm.
Toll Fraud
Toll fraud is the unauthorized use of a private phone system to make chargeable calls to 900 or premium rate numbers or long distance (including international calls). Hackers will steal long distance to resell dial tone to customers, or simply done for entertainment. This is approximately a $40 billion per year problem worldwide.
Hackers are also now using your phone system to scam your guests. Hackers have now found ways to get calls directly to guestrooms and claiming to be hotel staff. They then claim there is a concern with their credit card or they ask the guest to confirm their credit card information. Hackers gain access to your phone system and reconfigure it to allow for long distance, 0+ or 1010 calling.
How Are They Getting In?
• IVRs
• Voicemails
• Recording Announcement devices (RAD)
• Direct Inward System Access (DISA)
• Direct Inward Dialing (DID)
• SIP set registration
• Toll free numbers
• Routers on IP PBX's
• Remote system administration
• TIE Trunks and tandem network services
• Older Modems
Signs You Have Been Hacked:
• System is inordinately busy - can't get outside line or auto attendant is always busy for extended period.
• Users unable to access their voicemail because the password has been changed.
• New voicemail boxes appear on your system.
• Changes in internal call routing.
• Increase in wrong number or blocked calling.
• Abnormal calling pattern - nights, weekends, holidays.
• Toll calls originating from voicemail.
• Increase in long call times.
• Callers asking to be transferred to odd or unusual numbers.
What To Do If You Think You Have Been or Are Being Hacked:
Contact your phone service provider immediately and have them block calling. After you contact your provider call your equipment provider to have them review the issue and fix any security vulnerabilities.
How To Help Prevent An Attack
While there is no way to be 100% secure and still make/receive outside calls, there are steps your equipment provider can do to help protect against these new tactics that are being used by hackers. Contact your equipment provider to make sure your system is up to date on the latest security measures.
If you would like ECS to analyze your Mitel phone system, to make sure you are utilizing all the security features your system offers and all of the new security recommendations that are out now, please contact us.