PBX Hacking Scams
Private branch exchange (PBX) systems allow businesses to build customizable phone systems for their offices. These technologies can utilize voice over IP technology (VoIP) to save costs. However, when PBX systems are not properly secured, they can end up costing businesses lots of money by turning them into victims of a fraud scheme.
Other People Are Reading
-
PBX Systems
-
PBX systems mimic the operation of older switchboards and switchboard operators. They are computer programs which accept incoming calls and route them to the appropriate parties, place callers on hold, and forward calls. They also allow the users themselves to dial out of the building. Modern PBX systems use connections to Internet servers, which connect calls into phone systems, rather than traditional phone lines to accept and create calls.
Compromising PBX
-
PBX systems have been the target of frauds which cost the systems' owners substantial amounts of money. As modern PBX systems place calls through an Internet connection, hackers from anywhere in the world can try and attack your PBX system. This fraud begins with hackers compromising the PBX systems and gaining administrative access. Usually hackers do this by finding PBX systems whose owners never changed the password from the manufacturer defaults, which the hackers already know. Once the system has been compromised, the access data is sold to call centers outside the United States.
-
Fraud
-
The call centers, which bought the PBX access data from hackers, offer customers calling services at very low prices. This "service" is fulfilled by the companies using the PBX access data to route the call center's customers' calls through the compromised PBX systems. This allows customers to make their calls normally, only the call center does not have to pay a dime to complete the call. The cost is borne by the company which owns the compromised PBX system.
Fraud Prevention
-
There are a few simple steps you can take to protect your PBX system from this kind of scam. The easiest first step is to change your system's default password. By doing this you will close off one of the most common lines of attack. After doing this, you should also change your system's password regularly. Use strong passwords, which use upper and lower case letters, numbers and symbols. You can also monitor and audit your PBX system's phone logs from time to time, looking for strange calls which could indicate your system is being exploited.
-
References
- Photo Credit phone 3. image by Alexander Lukyanov from Fotolia.com
