Mark Collier's VoIP Security Blog

Skype Flaw Allows Tracking of User Location

Here is an article about how a researcher used/hacked Skype to determine the location of users.

http://www.foxnews.com/scitech/2011/10/24/skype-security-flaw-potential-terrorist-threat-nyu-professor-says/print

Article about A new VoIP Stenography Tool

Here is an article about using stenography and VoIP (media) to exfiltrate data. It has an interesting twist to it.

http://www.net-security.org/secworld.php?id=11952

I haven't seen any tools yet for video, but I am sure there are some on the way. Video is obviously a lot more interesting, because of the available data in which to hide messages.

VoIP Security Toll Fraud Issue Reported at Astricon

Here is a link to a short video from the recent Astricon Asterisk conference, where a $400,000 toll fraud attack was discussed. The basic idea is that the hackers break into the Asterisk voice mail system and use it to make toll calls. Here is the link:

http://blog.tmcnet.com/blog/tom-keating/asterisk/astricon-voip-security---400000-fraud---yikes.asp