VoIP Security a growing concern after Arrest of Hacker

[regic]

VoIP could become the newest opportunity for cyberthieves, with the recent arrest of a Miamian only the beginning...

In general, Pena's attack was a spoofing attack, designed to let his calls masquerade as those of another carrier. Madhavapeddy says these types of attacks are relatively easy to carry out and could hit at enterprises just as easily as carriers.

One possibility is stolen access, but there are others. For example, a hacker might spoof call-forwarding features to make all calls route to him. Customers trying to reach a help line could be tricked into giving credit card information to the hacker. "People remember the 'voice' and forget the 'over IP' part," says Mark Rasch, SVP of security company Solutionary Inc. "Just like data can be rerouted without authorization, VoIP can be rerouted without authorization."...

full article: http://informationweek.com/news/showArti...=188702963

[mandy]

A related article:

Security experts warn that attacks on Internet-based calling systems—though rare now—may be just around the corner. Businesses, be ready.

It's become a familiar pattern in online security. A groundbreaking way to communicate emerges, spreads like wildfire, and then hackers find a way to use it to their advantage. Security companies react—but not before the problem has succeeded in wreaking havoc. It happened with e-mail and is happening now with instant messaging and mobile devices...

full article: http://www.businessweek.com/technology/c...d=bier_tcj