BOOK AN APPOINTMENT WITH AN IT SPECIALIST TODAY

Prevent Hackers from Stealing Your VoiP and Costing You Money

Prevent Hackers from Stealing Your VoiP and Costing You Money

Hackers Stealing VoIP

Best ways to prevent your business from losing money because of hackers stealing your VoIP service.

In 2017, telecom fraud amounted to $29.2 billion in losses to organizations and carriers, according to No Jitter. One form of telecom fraud is theft of service, which is obtaining service through an individual or company without payment. VoIP is much more prone to theft of service than traditional telephony services. Service can be stolen through hackers stealing user names, passwords, and other account information. Hackers also can introduce malware into the system to more easily enable theft. Unfortunately, the Federal Communications Commission has not issued any regulations on VoIP fraud, which means that businesses are still liable for any hacked calls. Fortunately, businesses can take some precautions to prevent theft.

Protect Passwords

When businesses buy a new phone, they should always change the password from the factory settings. Some phones use different passwords for the phone interface and web interface. In this case, unique passwords should be used for each interface. Passwords should be made secure by changing them every six months and requiring at least 12 characters including upper and lower case letters, symbols and numbers. Businesses also should regularly update the admin portal password for the VoIP provider.

Limit Physical Access

VoiP phones and other instruments should be kept in a locked space to prevent unauthorized access. The environment of the space should be maintained within the limits set by the equipment manufacturer. Secure access panels to the air conditioning and power.

Build Security in Layers

To prevent attacks and service theft, an organization should plan its VoIP system as carefully as it does its data network. One way is to plan security in layers.

  • The first layer of security is preventing intrusions on the network. To secure the network, use VoIP-aware firewalls and shut down ports at any sign of malicious behavior, according to Tech Target.
  • The second layer of security is phone authentication. The phone will not be authorized to the network or to the IP PBX unless a mutual certificate exchange or a certificate and dongle architecture have authenticated it, according to Tech Target.
  • The third layer involves encryption or authentication between the media and various channels. This means media gateways, ALGs, firewalls and NAT devices, and SBCs, according to Tech Target.
  • Finally, the fourth layer is user authentication. Only users authenticated via a user name and password or token device or mutual swap should be allowed to make or receive phone calls, according to Tech Target.

Disable International Calling

Most hackers go after the more expensive international phone numbers. Businesses that don’t need to regularly make international calls can disable international calling, using an international calling card when necessary. If regular international calling is required, businesses should carefully check invoices to be sure all calls made are legitimate.

More Like This

Apple Notes Tips

Apple Notes Tips With the dawn of the new year, January is the perfect time to get your to-do list in order. But these days, most people’s lists are complicated agendas full of work and personal items, multiple schedules, and seemingly endless tasks. To keep things straight, one thing that can help is a savvy …

Apple Notes Tips Read More »

Read More

AA22-011A: Understanding and Mitigating Russian State-Sponsored Cyber Threats to U.S. Critical Infrastructure

Original release date: January 11, 2022 Summary Actions Critical Infrastructure Organizations Should Implement to Immediately Strengthen Their Cyber Posture. • Patch all systems. Prioritize patching known exploited vulnerabilities. • Implement multi-factor authentication. • Use antivirus software. • Develop internal contact lists and surge support. Note: this advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge …

AA22-011A: Understanding and Mitigating Russian State-Sponsored Cyber Threats to U.S. Critical Infrastructure Read More »

Read More

11 Unexpected Ways to Manage Chromebook Files

11 Unexpected Ways to Manage Chromebook Files Chromebooks have been around for over a decade now, but at the beginning, they weren’t intended for file management, with the original Chromebooks not even having a Files app. Copying or moving data, finding files or wirelessly transferring and syncing files with other systems was virtually impossible. But …

11 Unexpected Ways to Manage Chromebook Files Read More »

Read More

AA21-356A: Mitigating Log4Shell and Other Log4j-Related Vulnerabilities

Original release date: December 22, 2021 Summary The Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), National Security Agency (NSA), Australian Cyber Security Centre (ACSC), Canadian Centre for Cyber Security (CCCS), the Computer Emergency Response Team New Zealand (CERT NZ), the New Zealand National Cyber Security Centre (NZ NCSC), and the …

AA21-356A: Mitigating Log4Shell and Other Log4j-Related Vulnerabilities Read More »

Read More

What Are Workers’ Rights in the Face of Employee Monitoring?

What Are Workers’ Rights in the Face of Employee Monitoring? As the use of technology in our everyday lives continues to increase, it’s no surprise that any legislation surrounding that technology is constantly lagging behind. After all, it’s usually impossible to know the potential dangers of technology until damage has been done. Fortunately, legislation usually …

What Are Workers’ Rights in the Face of Employee Monitoring? Read More »

Read More

Can Technology Reverse the Workforce – Depleting ‘Great Resignation’ of 2021?

Can Technology Reverse the Workforce – Depleting ‘Great Resignation’ of 2021? Although remote and other technology appears to be an underlying cause of the 2021 “Great Resignation,” it may also hold the key to a“Great Return.” Many believed the mass exodus from the workforce had peaked in April when a total of 24 million had …

Can Technology Reverse the Workforce – Depleting ‘Great Resignation’ of 2021? Read More »

Read More