@sbcsu Xpressions voicemail question

[MisterLucas]

We have a Siemens Hipath 4K system.

We were alerted by our CO that a number of calls have been going to Barbados that totaled to 45,000 dollars in one day.

we were told that our main number from the outside will be blocked until we found the source.

In our research we found some numbers had the main the number as their public number and we changed then to reflect what their number was.

We also checked to see if call forward was on anyone's phone and it is not.

The problem we are having now is that Xpressions gets a busy signal or just drops the call.

If you keep trying eventually you will get a channel. We currently have 24 channels up and running but only 2 callers may get thru at a time.

have you ever experienced this sort of problem before? What do we need to do to get the channels to accept calls from internal/external again.

Any help will be greatly appreciated. Thanks in advance!

 

[sbcsu]

Hi MisterLucas,

It looks straight away that your Xpressions has been hacked.
They are using the Voicemail to dial out to International Premium Rate numbers in Barbados.

Disconnect the Xpressions LAN straight away to minimize your losses.
If it is an ISDN connection then disconnect the trunks from the Xpressions straight away.

Then - For Each Extension on the Xpressions: (There may be a quicker way but this will work)

Untick both the 'Call Forwarding Menu Privilege' boxes
Untick both the 'Change referral extension menu privilege' boxes

Contact your local maintainer for more work on this,
Contact your local CO if not already done.

 

[MisterLucas]

Thanks @Sbcsu for the prompt response.

We changed a setting in the ISDN API voicemail profile. We unclicked the call forwarding to external calls. This was just before you responded.

Before when a caller calls into their voicemail account there is an option to transfer out and with the changes we made you no longer can do it. We tested it with our mobile phones.

We see in the Xpressions GUI where to changed the options you recommended which is based on the stations. Will this still be necessary?

How do we get the 24 channels back?

We see the calls coming into the vogues and then dropping and trying the next available channel.

 

[sbcsu]

It is important that you get an Xpressions expert to look over the system as soon as possible to resolve issues.
It could be still open to hacking abuse.

To reset the channels (at a quiet time)

DEA-DSSM:L,1-1-1-1;
ACT-DSSU:AUL,BCHAN,1-1-1-1;
RES-DSSUEN,1-1-1-1;

To see status of Port Equipment Number (PEN)
DIS-SDSU:ALL,,PEN,PER3,1,1,1,1;

 

[MerlinJ]

@MisterLucas

Sorry to hear about your issue.
On a side note:

I noticed in your post that you said: "Before when a caller calls into their voicemail account there is an option to transfer out and with the changes we made you no longer can do it."

Would you mind posting the changes you made to do this? I'm not familiar with Xpressions and I'd like to remove that option on my system.

Thanks!