Customer getting billed $1,000 a day for over sea calls!!

[curlycord]

This started happening on an Option 11 the other day.
We suspect it is not inside people because they are restricted but rather maybe hackers of sorts??
Any ideas what to look for in programming or other??
Thanks

 

[cmawbey]

do you have any DISA extensions

Colin

 

[LubbTech]

First off find out if anyone has the ability to transfer there calls to an external number, if so that would allow someone the ability to place calls from your switch. Second I would check how my NCOS and BARS setup. Also if you want to keep the ability to dial internationally you should make sure your RDB is configured correctly and the right people only have access to that route.

 

[curlycord]

More info... Telco reports 500 calls to this over sea location a day....this would no doubt flood the PRI but no complaints from out side users and also calls are made only when Auto Attendant is on.
I heard while back about a warning of people getting a call from a so called phone guy who claims to be testing the lines and asking them to press a star code and that would then somehow give the caller the ability to bill calls to the person who entered the star code.

Will look into your questions....thanks : )

 

[SMC1]

If you are running meridian mail, check the restrictions in the mail. I have seen hackers use a person who is on vaction's mail box to threw dial out.

 

[dnc16]

I agree with yz250, that if they are using Meridian Mail, check out the restriction/permission list. There are a few scams that work to bill LD calls to 3rd parties if your restriction list is not correct.