Hacker News Reader

Toll fraud is quite common due to the VOIP industry not valuing security. Combined with free conference calling numbers costing a bit to call (and calls to these numbers lasting a fair while), I'm not surprised that most of the traffic was headed to these numbers.

View on HN

Any idea how this Asterisk server would have been added as a route?

These callers that were recorded, were not the ones trying to leverage the hacked server, but rather just dialed the number and were routed through it.

One common exploit if only one user account is hacked is to set up a forward to a specific high cost number that receives a lot of traffic. There are carriers who aggregate these routes and even blend them in with legitimate routes and then resell them to other carriers at a low cost.

Reply on news.ycombinator.com