Here is a post by Dan York on the VOIPSA blog, describing an attack where by using a statefull fuzzer, you can cause some SIP phones to allow eavesdropping on conversations in the room.
« A Brief Interview in VoIP-News | Main | A Couple of Additional Vulnerabilities »
August 31, 2007
The comments to this entry are closed.
Search Blog
- Search Blog
Become a Fan
Recent Posts
- Links to recent TDoS articles
- Some more information about how TDoS affects 911 systems
- Discussion of TDoS Attacks Against 911 in The Cyber Shield
- Young Hacker "Accidentally" Generates a TDoS Attack Against 911
- Follow up article in GCN about how DHS S&T CSD is working to solve TDoS attacks for 911
- Some recent articles on Telephony Denial of Service (TDoS) and how it affects 911
- 70 people busted for IRS scam
- Videos from the DHS Cyber Security Division (CSD) workshop earlier this year
- Back to Blogging
- Video on a How to Use a Burner Cell Phone for TDoS
My Books
My Voice Security Articles
- Investigators faced high-tech puzzle in tracing R.I. robocall threats - News - providencejournal.com - Providence, RI, 2/2016
- Exploring the Telephony Denial of Service (TDoS) Security Affairs, 1/2014
- DHS warns of TDoS attacks - Krebs on Security, 4/2013
- Swindlers use telephones, with Internet Tactics (TDoS), 1/2014
- SecureLogix CTO: The UC network security issues enterprises face, 4/2014
- Mark Collier Article on VoIP/UC Security, 3/2013
Voice Security Docs/Videos
- How SIP has made voice attacks more common, 6/2014
- DEF CON 22 - Weston Hecker - Burner Phone DDOS 2 dollars a day : 70 Calls a Minute - YouTube, 8/2015
- Kamailio World 2015 - Sergio García Ramos - VoIP Security – Bluebox ng Continuous Pentesting - YouTube, 6/2015
- A presentation on toll fraud, 12/2014
- Keeping Denial of Service and Financial Fraud out of Your Contact Center, 6/2015
- SecureLogix® State of Security Report, 6/2014
- Carolinacon 2014 - How To Get Money Fast Using A Pwned Pbx - Patrick Mcneil / Unregistered436, 6/2014
- Hacking SIP Like a Boss! (Athcon 2013) Live Demo Remake - YouTube, 7/2013
- VoIP Security for Dummies, 9/2013
- VoIP Wars : Return of the SIP, 7/2013
Voice Security Links
- VOIP Security - voip-info.org
- Telecom Fraud and Technologies
- A Unified Communications / IP Telephony Security Blog
- blog | TrustID | Automatic Caller Authentication
- VOIP Security Resources - The Security Skeptic
- Voice over IP Security Alliance (VOIPSA)
- Seven Deadliest Unified Communications Attacks
- Blue Box: The VoIP Security Podcast
Telephony Denial of Service (TDoS)
- “TNT” gang has released a new hardware TDoS toolSecurity, 2/2015 Affairs
- 5 Types of Contact Centers Security Issues & How To Combat Them, 2/1015
- Managed anti-forensics IMEI modification services fuel growth in the non-attributable TDoS market segment Webroot Threat Blog, 4/2014
- TDoS products evolution in the underground market | Security Affairs, 1/2014
- TDoS extortionists jam phone lines of public services, including hospitals | Naked Security, 1/2014
- New TDoS market segment entrant introduces 96 SIM cards compatible custom GSM module, positions itself as market disruptor Webroot Threat Blog, 1/2014
- Vendor of TDoS products/services releases new multi-threaded SIP-based TDoS tool Webroot Threat Blog, 11/2013
- DDoS for hire vendor 'vertically integrates' starts offering TDoS attack capabilities Webroot Threat Blog, 9/2013
- TDoS attacks on the rise: Who is at risk and what to do under attack, 9/2013
- 9-1-1 Magazine: The Growing Threat to PSAPs from Telephony Denial of Service (TDoS) Attacks, 7/2013
- DIY SIP-based TDoS tool/number validity checker offered for sale | Webroot Threat Blog - Internet Security Threat Updates from Around the World, 04/2013
- TDoS | Webroot Threat Blog - Internet Security Threat Updates from Around the World, 06/2013
- DHS, FBI warn over TDoS attacks on emergency centers - CSO Online - Security and Risk, 4/2013
- Telephony Denial of Services (TDOS) to Public Safety Communications Phone Service | Public Safety Communications, 3/2013
- FBI — Cyber Security: Threats to the Financial Sector, 9/2011
- Rapper The Game May Face Charges Tied To Flash Mob Calls | FoxNews.com, 8/2011
Comments