The Rising Threat of Telephone Fraud

Everybody knows that when you surf the web, you need PC protection, but very few consider protecting their phone system.  Telephone fraud is fast becoming a global menace and requires urgent attention.

SME’s and non-profit organisations are particularly at risk from hackers whose activities can cost the business many thousands of pounds.  Last month Romanian authorities dismantled a cybercrime network blamed for causing more than 11 million euros in losses to firms in the US, UK, South Africa, Italy and Romania.  Here in the UK, a North Wales based charity recently faced a huge bill after their phone system was attacked.

Kieran Duff, Chief Officer of Flintshire Local Voluntary Council (FLVC) has been keen to warn schools, businesses and other charities to protect themselves against a scam that has cost his organisation the best part of £4000. Hundreds of calls were made to premium and international numbers over one weekend after faceless fraudsters hacked into their phone system.

The most common attack is carried out in two parallel moves.  Cyber thieves obtain account information and then contact institutions, changing information such as phone numbers, email addresses or even bank account numbers so they can later transfer money or empty them.  At the same time, they flood the business’ phone lines with spam calls in order to block verification calls coming in from the banks and other institutions.

It is a silent crime, so it is vital that all parties remain vigilant.  You should do what you can to lock down the switch, starting with traditional data network security investments.  Anti-hacking technology should now become a pro-active and standard element to every new quote.  In addition, carriers should be alert to any unusual call patterns.  However, even with all this in place, it is unlikely that any PBX is fraud proof particularly when connected to unsecure phone lines, so what can you do?

Have good passwords

Wherever required, particularly on voicemail, DISA (Direct Inward Station Access) and on the remote access support service.

Minimise access

That includes the amount of systems and software that has access to the phone system.  Also ensure that only trusted people are able to change configurations. 

Call Barring lists

Make sure you keep all call barring lists up to date.  Furthermore, that those lists include allowances for the fall-back route through BT.

Adopt a security device

If you haven’t already, invest in a dedicated security device that allows you to keep your PBX features but increase security.

Call Management Software

Add software that can alert you when calls are made outside of your expected patterns.