12/06/2008

News / New Technique Utilizing Private Branch Exchange (PBX) Systems To Conduct Vishing Attacks

The FBI
has received information concerning a new technique used to conduct vishingi attacks. The recent attacks were conducted
by hackers exploiting a security vulnerability in Asterisk software. Asterisk is free and widely used software developed to integrate PBXii systems with Voice over Internet Protocol (VoIP),
digital Internet voice calling services; however, early versions of the Asterisk
software are known to have a vulnerability. The vulnerability can be exploited by
cyber criminals to use the system as an auto dialer, generating thousands of vishing
telephone calls to consumers within one hour.



If a consumer falls victim to this exploit, their personally identifiable information
(PII) will be compromised.
To prevent further loss of consumers' PII and to reduce the spread of this new technique,
it is imperative businesses, using Asterisk, upgrade their software to a version
that has had the vulnerability fixed.



Further, consumers should not release personal information in response to unsolicited
telephone calls. Providing your PII will compromise your identity!



If you have been a victim of Internet crime, please file a complaint at
www.IC3.gov.





1. Vishing utilizes caller ID spoofing via VoIP to contact potential
victims in order to gain access to their PII by convincing the victim that the criminal
is associated with a legitimate business with a need to know the victim's PII.
2. PBX Systems are used by companies to allow telephone calls
between VoIP enterprise users on local lines while allowing all users to share a
limited number of external lines.
http://www.ic3.gov/media/2008/081205-2.aspx

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90 | 91 | 92 | 93 | 94 | 95 | 96 | 97 | 98 | 99 | 100 | 101 | 102 | 103 | 104 | 105 | 106 | 107 | 108 | 109 | 110 | 111 | 112 | 113 | 114 | 115 | 116 | 117 | 118 | 119 | 120 | 121 | 122 | 123 | 124 | 125 | 126 | 127 | 128 | 129 | 130 | 131 | 132 | 133 | 134 | 135 | 136 | 137 | 138 | 139 | 140 | 141 | 142 | 143 | 144 | 145 | 146 | 147 | 148 | 149 | 150 | 151 | 152 | 153 | 154 | 155 | 156 | 157 | 158 | 159 | 160 | 161 | 162 | 163