HNHacker News
TopNewBestAskShowJobs

nirsimionovich

5 karma · joined January 9, 2017

submissionscomments
nirsimionovich··on Telephony Fraud – Still going strong
actually, people don't really know the following: The PA is identified by both the 972 (Israel) country code and the 970 (PA) country code.

When calling Israel on 97259, or 97222, or 97242, or 972502, or 972522 or 972542 - in some specific number ranges, you actually reach the PA. This is why many Israeli and worldwide PBX owners have routing mistakes on them, and you can basically get a minute of PA traffic, that normally costs around $0.19 for - wait for it - $0.008.

The main issue is that when the ITU assigned 970 to the PA, they never made them drop the 972 prefix - resulting in the world's longest arbitrage wholesale game.

nirsimionovich··on Telephony Fraud – Still going strong
Actually, the honeypot system is slightly smarter than that. Some of the honeypots are actually based up a SIPP UAS scenario, which will accept any traffic and will play back an audio file of 5 minutes. Those servers normally yield slightly different results, that normally look like a scan, then followed by a media test then followed by something that looks almost manual - and after the manual test, they go away, after realizing they hit a honey pot.
nirsimionovich··on Telephony Fraud – Still going strong
Oh yaeh, that was a real surprise - also the various attacks on the server were very surprising as well - that kind'a caught me off guard.
nirsimionovich··on Telephony Fraud – Still going strong
Well,

To be more accurate, I've shown a snippet describing only 48 hours of "suspected attacks" that were performed to a single server. The overall network contains 6 different honeypots around the world, which had been changing IP numbers once every 7 days for the past 2 years.

Just to give a rough idea, the overall number of attacks, that specific server received in the month of December was over 180,000 attacks, with about 60 distinct attack sources and about 8 different attack patterns. Analysing all the data is far beyond my current time capability, simply because I'm dealing with other subjects.

It is true that you can't deduce any type of specific reasoning from the displayed information, as the data set is very much limited. However, it shows that as much as Skype/Facebook/Whatsapp are popular, the popularity of VoIP hacking and hijacking still proves this is a booming market with much financial gain.