Our Videos

December 10, 08

NEWS / NEW TECHNIQUE UTILIZING PRIVATE BRANCH EXCHANGE (PBX SYSTEMS TO CONDUCT VISHING ATTACKS


The FBI has received information concerning a new technique used to conduct vishing (1) attacks. The recent attacks were conducted by hackers exploiting a security vulnerability in Asterisk software. Asterisk is free and widely used software developed to integrate PBX (2) systems with Voice over Internet Protocol (VoIP) digital Internet voice calling services; however, early versions of the Asterisk software are known to have a vulnerability. The vulnerability can be exploited by cyber criminals to use the system as an auto dialer, generating thousands of vishing telephone calls to consumers within one hour.

The vulnerability referred to in this alert is a known vulnerability. Digium, the original creator and primary developer of Asterisk, released a Security Advisory, AST-2008-003, in March of 2008, which contains the information necessary for users to configure a system, patch the software, or upgrade the software to protect against this vulnerability.

If a consumer falls victim to this exploit, their personally identifiable information (PII) will be compromised. To prevent further loss of consumers’ PII and to reduce the spread of this new technique, it is imperative that businesses using Asterisk upgrade their software to a version that has had the vulnerability fixed.

Further, consumers should not release personal information in response to unsolicited telephone calls. Providing your PII will compromise your identity!

If you have been a victim of Internet crime, please file a complaint at www.ic3.gov.

(1) Vishing utilizes caller ID spoofing via VoIP to contact potential victims in order to gain access to their PII by convincing the victim that the criminal is associated with a legitimate business with a need to know the victim’s PII.

(2) PBX Systems are used by companies to allow telephone calls between VoIP enterprise users on local lines while allowing all users to share a limited number of external lines
http://www.fbi.gov/cyberinvest/escams.htm

 




Testimonials

Niranjan Sujay
I recently used LOGOS INTERNATIONAL for the translation of my bachelor’s certificate, and I couldn’t...
Read More »
Katia Nagata

As a foreigner, I needed a certified translation, so I called the DOE to give me a list of the ce...
Read More »
AnnaMaria Realbuto
Thank you for all your assistance and efficiency...
Read More »
Kateryna Melnychenko
Thanks a lot Anton!...
Read More »




FAQ

What is K-1 Fiance (e) visa, and how does it work?
Read More »
What is a will?
Read More »
What are the Filing Fees for the Forms?
Read More »
Who is eligible to participate in the LBO?
Read More »






News

May 7, 25
Colorado Governor Jared Polis signs bill adding gender marker to death certificates
Read More »
May 6, 25
Implementation of Real ID acts puts Florida woman without birth certificate in bureaucratic limbo
Read More »
April 30, 25
US citizen charged with being “unauthorized alien” despite possessing US birth certificate
Read More »
April 23, 25
Pope Francis died of stroke and irreversible heart failure – death certificate
Read More »