The U.S. Justice Department unsealed indictments against three Filipino residents on 06-12-2009 for an international PBX hacking scheme. According to Security Fix , the three are accused of hacking into thousands of private telephone networks in the US and abroad, and then selling access to those networks at call centers in Italy that advertised cheap international calls and used the profits to help finance terrorist groups in Southeast Asia.
The U.S. government alleges that the individuals arrested in the Philippines were responsible for hacking private branch exchange (PBX) systems and voice mail systems owned by more than 2,500 companies world-wide. The indictments alleges that between October 2005 and December 2008, Manila residents Mahmoud Nusier, Paul Michael Kwan and Nancy Gomez broke into PBX and voice mail systems, mainly by exploiting factory-set or default passwords on the systems. According to Erez Liebermann, assistant U.S. attorney for New Jersey, “The default passwords were left open in most of these PBX systems”.
The government charges that Italian call center operators paid the hackers $100 for each hacked PBX system they found. The defendants are charged with computer hacking, conspiracy to commit wire fraud, and access device fraud. The case was filed in the U.S. District Court of New Jersey, the home of long distance provider AT&T. The documents allege the thieves used the hacked PBX systems to relay more than 12 million minutes in unauthorized international phone calls, or $55 million worth of telephone charges.
According to Reuters the defendants allegedly sold access to the compromised systems to 40-year-old Pakistani Mohammed Zamir, the manager of a call center in Brescia, Italy. Italian authorities arrested Zamir and at least four other Pakistani men operating call centers throughout Northern Italy. According to the AP and Carlo De Stefano, head of Italy’s anti-terrorism police unit, much of the proceeds were sent to the Philippines and may have been forwarded to Islamic extremist groups in the region, including Al-Qaeda-linked Abu Sayyaf. “There are strong suspicions and some clues, but nothing concrete,” De Stefano said.
Rb-
No matter the system (TCM, VoIP, SIP, T’s) sloppy installation practices can make any type of system vulnerable. That’s why I always include a requirement that all manufacturer and VAR account passwords be changed before the equipment is brought on-site and that they be changed by the Owner at time of acceptance of the system. I have started to back this up by tying this requirement to their PLM bond requirements.
We also recommend to our clients that they disable international calling by default on their system and only allow it as required, based on the concept of least privilege.
The global body count in the tech sector has risen above 500,000 in July 2009. Since the correction, recession, economic melt-down started in earnest in October 2008, approximately 505,477 tech related jobs have been right-sized, down-sized, resource actions eliminated. January 2009 is the worst month for employees with nearly 164,000 tech jobs eliminated. October 2008 saw over 56,000 workers pink-slipped. Approximately 53,500 tech workers we laid-off in both December 2008 and February 2009. The last two months have shown a decline in the numbers of tech workers getting the axe. During June 2009, 4,326 workers were laid off, the smallest monthly count since the economic melt-down started. July 2009 witnessed 12,65 layoffs, most from Verizon. The July count is also well below the average 50,000 lay-offs a month pace being set during the economic meltdown.
