{"id":24325,"date":"2019-01-11T16:46:00","date_gmt":"2019-01-11T16:46:00","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/oculeus-anti-fraud-offering-protects-against-telecom-system-abuse\/"},"modified":"2019-01-11T16:46:00","modified_gmt":"2019-01-11T16:46:00","slug":"oculeus-anti-fraud-offering-protects-against-telecom-system-abuse","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/oculeus-anti-fraud-offering-protects-against-telecom-system-abuse\/","title":{"rendered":"Oculeus anti-fraud offering protects against telecom system abuse"},"content":{"rendered":"
<\/div>\n

When most enterprise companies worry about having their systems hacked by attackers, the main concern is for the enterprise networks. Few companies consider that their phone systems may be vulnerable to hacking resulting in costly toll fraud. Nevertheless, the practice of hacking into corporate PBX systems and injecting fraudulent calls over the network is causing billions of dollars in damage worldwide every year.<\/p>\n

Enterprise companies use modern PBX (private branch exchange) systems to run their communications. A PBX switches calls between enterprise users on local lines while allowing all users to share a certain number of external phone lines. Modern PBX systems work on the Session Initiation Protocol (SIP), which is a signaling protocol used for initiating, maintaining, and terminating real-time sessions that include voice, video, and messaging applications.<\/p>\n

SIP is a protocol that runs on the internet rather than on traditional telecommunication lines. It creates a vulnerability because the protocol is open for anybody to get into these communications if they have the access credentials. The only thing an attacker needs to hack a PBX is a login ID and password and then it\u2019s possible to start a fraudulent voice communication via a telco operator.<\/p>\n