If you get a chance, check out Nicholas's VoIP security blog at:
www.secvoip.com
Search Blog
- Search Blog
Become a Fan
Books
- Amazon.com: Hacking Exposed VoIP: Voice Over IP Security Secrets & Solutions
- Amazon.com: Seven Deadliest Unified Communications Attacks
- Hacking VoIP: Protocols, Attacks, and Countermeasures: Himanshu Dwivedi: Books
- Securing VoIP Networks
- Voice over Internet Protocol (VoIP) Security
- Practical VoIP Security
- Understanding Voice over Ip Security
Conferences
Recent Posts
- Article on Telecom/Toll Fraud in 2011
- TDoS/Harassing Call/Phone Bombing Attack on MI6
- Social Engineering Used to Steal From Billionaire Paul Allens Acount
- Contact Center Social Engineering/Fraud Article
- Caller ID Spoofing Used for Voice Phising (Vishing) Attacks
- Another Toll Fraud Attack
- Telephony Denial of Service (TDoS) Attack on BBC
- Hacker/Thief Steals $2,100,000 Through Fax Fraud
- Caller ID Has Pretty Much Become Worthless
- FCC Moves to Protect Consumers from Automatically Generated Calls
General Articles
- How to Stop Call Center Fraud - BankInfoSecurity, 3/2012
- Finextra: Wells Fargo wires crook $2.1m, 2/2012
- Attackers Divert Bank Phone Calls to Cover Tracks - Dark Reading, 2/2012
- FCC Passes Law Allowing Consumers to Block Automatically Generated Calls, 2/2012
- Metasploit: Board Room Spying for Fun and Profit | SecurityStreet, 2/2012
- Video Security Issues, 1/2012
- VoIP Hopper 2.01 Released – IP Phone VLAN Hopping Tool | Darknet - The Darkside, 11/2011
- Hiding messages in VoIP packets, 10/2011
- Skype Security Flaw Potential Terrorist Threat, NYU Professor Says | Fox News, 10/2011
- Massive DDoS attacks a growing threat to VoIP services - VoIP, unified communications, Telecommunication, security, networking - CIO, 10/2011
- Courthouse News Service, 8/2011
- VoIP Security Threats Explained, 8/2011
- VoIP Security: Sweat It, at Least a Little Bit | Blogs | ITBusinessEdge.com, 1/2011
- Master of Unified Communications: Addressing UC Security Concerns | Network World, 10/2010
- Cisco Community Central: Innovators Forum, VoIP Security, 11/2010
- NoJitter Article on Vunneling, 6/2010
- NoJitter Article on UC Security, 8/2010
- Security Issues in VoIP, 7/2010
- Scammer hacks Prescott company's Internet phone system - The Prescott Daily Courier - Prescott, Arizona, 3/2010
- Alleged Hacking-Terror Effort Thwarted - WSJ.com, 6/2009
« VoIP Security Video on YouTube | Main | Using Social Networking (Facebook) to Organize TDoS Attacks »
June 06, 2011
Comments
Verify your Comment
Previewing your Comment
This is only a preview. Your comment has not yet been posted.
Your comment could not be posted. Error type:
Your comment has been posted. Post another comment
As a final step before posting your comment, enter the letters and numbers you see in the image below. This prevents automated programs from posting comments.
Having trouble reading this image? View an alternate.
Toll Fraud
- 1000 scam calls hit WA business - Networks - SC Magazine Australia - Secure Business Intelligence, 3/2012
- Security Manager's Journal: Hackers Call Home, on Our Dime - Computerworld, 2/2012
- Man From Maryland Sentenced for $4 Million Payphone Fraud Scheme | LoanSafe, 1/2012
- AstriCon VoIP Security - $400,000 toll fraud - YIKES!, 10/2011
- North West Evening Mail | News | Furness firm targeted by Somalian fraudsters, 4/2011
- BBC News - The other kind of phone hacking, 2/2011
- BBC News - Hackers target NI Department of Finance phone network, 2/2011
- Businesses Warned About Recent Toll Fraud | Bernews.com, 2/2011
- Phone fraudsters leave businesses on hook - The Globe and Mail, 11/2009
- PBX hacking continues to threaten business owners - News - News | siliconrepublic.com - Ireland's Technology News Service, 5/2009
- Businesses hit by phone fraud want political action - CTV News, 2/2009
- FEMA phones hacked; calls made to Mideast, Asia - Technology & science - Security - msnbc.com, 8/2008
- Firms warned over ‘toll’ fraud scam - News - Garstang Courier, 10/2010
- Phone scam could cost Flintshire charity thousands of pounds - Flintshire Chronicle, 11/2010
- Security Manager's Journal: Slammed with a $100,000 phone bill - Computerworld, 11/2010
- Companies hit by 400% increase in phone fraud | The National Business Review, 11/2010
- BT Wholesale The Loop, February 2010, 2/2010
- Profiting From Fraud Is Not Good Business, Protecting Your Customers Is, 11/2009
- Internet phone systems become the fraudster's tool, 10/2009
- Business Stuck With Big Bills After Phone Lines Hacked - News Story - WSOC Charlotte, 8/2009
Telephony Denial of Service (TDoS)
- Team Poison hacks MI6 —then calls to boast - Technology & science - Security - msnbc.com, 4/2012
- BBC News - Cyber-attack on BBC leads to suspicion of Iran's involvement, 3/2012
- FBI — Cyber Security: Threats to the Financial Sector, 9/2011
- FBI — Phony Phone Calls Distract Consumers from Genuine Theft, 5/2010
- Rapper The Game May Face Charges Tied To Flash Mob Calls | FoxNews.com, 8/2011
- Hack Attack: How to Protect Your Online Accounts - WSJ.com, 10/2010
- The telephony denial of service attack | Latest Security News | GSO - Network Security Resources, 5/2010
- New telephony denial-of-service attacks used by thieves, 5/2010
- Thieves Flood Victim’s Phone With Calls to Loot Bank Accounts | Threat Level | Wired.com, 5/2010
- Telephony Denial-of–service (TDOS) Being Used To Distract Consumers From Genuine Theft, Warns FBI | VOIP IP Telephony, 5/2010
VoIP Security Blogs/Links
- blog | TrustID | Automatic Caller Authentication
- SecVoipSecVoip » VoIP/VVoIP/UC Security Blog
- VOIP Security Resources - The Security Skeptic
- Voice over IP Security Alliance (VOIPSA)
- No Jitter VoIP Security Blog
- Seven Deadliest Unified Communications Attacks
- Blue Box: The VoIP Security Podcast
- VoIP Security - VoIP News
- Ari Takanen's blog | ITworld
- VoIP security - Network World
- Skype Security Blog
Tools
Advisory Sites
Voice SPAM/Voice Phishing
- FBI: Pa. man stole Microsoft co-founder's identity - Yahoo! News, March 27, 2012
- Fake Caller ID Attacks On The Rise - Dark Reading, 3/2012
- Cybercriminals use "computer security" phone scam to grab credit card details, 6/2011
- VoIP Phishing in the Salt Lake Area, 7/2010
- Internet phone systems become the fraudster's tool, 10/2009
- Its only a matter of time until IP telephony is hit by spam and malware experts say, 6/2008
- [0806.1610] SPAM over Internet Telephony and how to deal with it
- The Anatomy of a Vishing Scam - Security Fix, Security Fix, 3/2008
- Rucus Info Page
- Vishing: The Latest, and Greatest, Security Concern | Security | bMighty.com, 2/2008
- Does UC present new opportunities for spammers? | IT Security | TechRepublic.com, 1/2008
- SPAM and SPIT: what are the dangers? | IT Security | TechRepublic.com, 1/2008
- Why VoIP is the next target for spammers | Technology | The Guardian, 11/2007
Interesting Documents
- State of Communications Security Report, 3/2011 - Bottom of Site
- PBX Hacking and Telephony Fraud Notice by Ireland’s Commission for Communications Regulations, 5/2009
- Cisco White Paper on VoIP Security
- Emerging Cyber Threats for 2009, 10/2008
- Paper on General VoIP Security, x/2007
- SANS Institute - VoIP Security Vulnerabilities, 12/2007
- eBook from ShoreTel With Chapter on VoIP Security
- NIST VoIP Security Guidelines
- VoIP Security Learning Guide
- VoIP Security: A Layered Approach
- VoIP Security Threat Taxonomy
Interesting Presentations
- Toll Fraud Presentation
- Voice of VOIPSA » Blog Archive » Slides: SIP Trunking and Security in an Enterprise Network, 9/2008
- ICE Tutorial
- Another Presentation on Nortel Unistim Vulnerabilities, xx/2007
- Presentation on Nortel Unistim Vulnerabilities, xx/2007
- Peer-to-peer SIP Security Presentation, 2/2008
- Voice of VOIPSA » Blog Archive » “Hacking and Attacking VoIP Systems” - Slides from my Astricon 2007 presentation about Asterisk and VoIP security, 1/2008
- Independent Research | iSEC Partners
- RTP Stenography
- Dustin Trammells Presentation on VoIP Security
Thanks Mark! I really need to do a new post, just have had so little time!
Posted by: Nicholas | July 04, 2011 at 11:38 PM
True, so many people are unfamiliar with VOIP, and especially security issues so it's good to hear as much as possible.
Posted by: Duane Gordon | July 12, 2011 at 12:58 PM
Agree with Duane. Thanks for the post!
Posted by: jason @ Voip | July 28, 2011 at 06:34 PM
Agree with all the above. security is the last thing to be considered so thanks for the advice.
Posted by: jason @ Voip | August 03, 2011 at 12:16 PM