Hacker News Reader

A while back I stumbled upon an interesting issue with a hacked Asterisk server. It was routing calls to FreeConferenceCall.com and other free conference numbers.

https://www.mnxsolutions.com/security/i-accidentally-recorde...

View on HN

Toll fraud is quite common due to the VOIP industry not valuing security. Combined with free conference calling numbers costing a bit to call (and calls to these numbers lasting a fair while), I'm not surprised that most of the traffic was headed to these numbers.

Any idea how this Asterisk server would have been added as a route?

These callers that were recorded, were not the ones trying to leverage the hacked server, but rather just dialed the number and were routed through it.

One common exploit if only one user account is hacked is to set up a forward to a specific high cost number that receives a lot of traffic. There are carriers who aggregate these routes and even blend them in with legitimate routes and then resell them to other carriers at a low cost.

Reply on news.ycombinator.com