BCM 400 International calling

[tdsitek]

I have a customer with a BCM 400. They were recently hacked through their phone line (PRI) where someone made a few calls to an International number for a few hours each call. AT&T flagged these calls and then umbers called were known fraud numbers. I have international calling restricted through the phone system and it works. I am wondering how they are getting through. I checked the reports in voice mail and no mailbox has an international number program in for message notify or outbound transfer. They do use message notification though for certain extension. The Voice Mail DN is in the same Restriction as all other phones.
Does anyone know how this can still happen?

 

[desphoneguy]

Try looking in your cdr files to see where the calls originated.

I also had this problem. There was an extension that had the ability to forward externally, and the mailbox was hacked for that extension and they changed the outbound transfer. You do not have to have a full number programmed it could just be 1 digit and the caller completes the dialing.

 

[telcodog]

You might want to be careful divulging how to hack systems on an anonymous board. You never know who's reading.

As techs, we have enough to deal with without teaching hackers how to break into systems.

I know, if we set them up properly, then the risk is low but there are still thousands of these things out there that aren't secured so let's not help the f@*&ing hacker scumbags!

 

[curlycord]

If they dont need to call over seas then buid a restriction filter for the lines.
Of the off call them give them a COS password to complete the call.

Check routes if any extras were programmed.

Delete any non used or suspcious mail boxes.

Change ALL passwords to mailboxes to 6 digit secure passwords unlike 1234.....including the admin boxes.

There is more you can do but this is a start.....if you do too much you wont know what the issue was.



=--(((((((((()--=
curlycord

http://www.curlycord.com