Simply put, VoIP Toll Fraud is a third party using your VoIP network to make toll or distance calls at your expense.

It’s not so very different from the concept of open-relays for email. The attacker scans your network from the outside (possibly using a network of bots) looking for said open relay in a hope of using it to send out spam. In the case of the VoIP toll fraud, the attacker will be scanning for an insecure VoIP endpoint through which to place a call. These calls may be to premium lines (premium-rate call stuffing) or to distant countries. The inevitable phone bills may prove costly to unwary businesses.

Lets say your VoIP system consists of a gateway between the internet and your network phones and that your network phones can also pick-up and dial real land-lines. The attacker will be looking for a way through your internet gateway and beyond that any vulnerable devices which can place calls on land-lines. These vulnerable devices might include VoIP routers, IP PBXs or IP phones with unpatched firmware. Any one of these devices left insecure could provide an attack vector for VoIP toll fraud.

The solutions are thankfully relatively simple. You need first to ensure that your gateway is secure and only allowing traffic to pass from desired networks. Secondly, you need to keep all of the VoIP enabled devices on your LAN secure. This means applying software patches to your IP PBXs as neccessary and keeping your IP phone’s firmware up to date (a measure often overlooked).

To patch the firmware on some low-end IP phones can be somewhat time consuming. Larger organisations with many IP phones should look to suppliers who can provide firmware roll-out systems to automate the process.

Above all, think security first and you’ll keep the attackers at bay.

Hosted IP PBXs mean that the customer has no need to purchase and install potentially costly servers and associated hardware to run their IP PBX. The IP PBX is instead hosted by the service provider (in this case AVAD) who colocate the neccesary hardware, data connectivity and telephone lines in a data center.

An advantage of this approach is that teleworkers can communicate with the PBX at potentially higher data rates than one located behind a normal ADSL or Cable link. Further, having the PBX hosted at a major data center may improve performance features such a latency and throughput for large, distributed organisations.

The Grandstream GXE502x moniker actually refers to one of two new products, the GXE 5024 and the GXE 5028. Both are IP PBXs, the 5024 having 4 analog extensions while the 5028 has 8. Both designs allow for 100 registered VoIP accounts, 50 simultaneous calls (presumably dependent on bandwidth) and a 20 seat conference bridge. Flash memory storage is utilised for voicemail.

Further comment at tmcnet