Hacked Phone System

[websterstech at gmail.com (Scott Webster)]

Thank you to everyone for your comments and suggestions. I knew that the
PaulDotCom community would have an answer to my question, and I was not
disappointed. 

 

The PBX in question is a 3Com VCX Enterprise system. If you are in the
market, don't buy one.

 

Thanks,

 

Scott

 

From: pauldotcom-bounces at mail.pauldotcom.com
[mailto:pauldotcom-bounces at mail.pauldotcom.com] On Behalf Of Vincent Lape
Sent: Wednesday, February 10, 2010 8:53 PM
To: PaulDotCom Security Weekly Mailing List
Subject: Re: [Pauldotcom] Hacked Phone System

 

Under 10k FBI will not touch it. 1st call the LEC and report the issue.
Dispute the charges. Next contact your phone system vendor. They should be
able to help you get logs from either the vm Or switch. Change all passwords
for ext, vm, admin, etc.contact the local pd and file a report. 

 

If you are not properly trained on the Pbx/switch get a service contract or
tech training. Lastly, enable access codes or accounting features for ld or
int calls. This can be done on some switches or at the lec level.   

Care to tell us what switch and vm you have In place?


On Feb 10, 2010, at 5:23 PM, Raffi Jamgotchian <raffi at flossyourmind.com>
wrote:

local FBI office, computer crimes desk

 

On Feb 10, 2010, at 2:58 PM, Scott Webster wrote:





Who could help with reporting this for potential illegal activity, besides
that fact it was illegal to use our phone system without permission.

On Wed, Feb 10, 2010 at 11:27 AM, Chris Clymer <cclymer at gmail.com> wrote:

Scott, do you mean who to report phone fraud to? Who to report phone
system flaws to? Or who can help you with incident response/forensics
on your PBX?

Sent from my iPhone

On Feb 10, 2010, at 12:32 PM, Scott Webster <websterstech at gmail.com>
wrote:


> Good Morning,
>
> Does anyone have experience with phone systems getting hacked and
> being used for international calls? I'm looking for direction on who
> to contact?
>
> --
> S. Webster

> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com




-- 
Scott Webster
Technology Consultant
_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com

 

_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20100211/f9291045/attachment.htm