All, We recently saw fraudulent calls via compromised SIP credentials to Killduff, IA. Any thoughts on why? I?m also interested in what everyone is doing today regarding enforcing and auditing strength of SIP credentials. In our experience compromised devices leaking credentials are more of a threat than weak passwords but we?re on Broadworks and running secureTlktWeakPasswordsTool currently. Thanks, Dave Sill IT Director, Socket Telecom <https://www.socket.net/> 573-817-0000 ext 211
Arbitrage scam, that's still one of those local monopolies most likely. On Fri, Dec 13, 2019 at 9:51 AM Dave Sill <dave at socket.net> wrote:
All,
We recently saw fraudulent calls via compromised SIP credentials to Killduff, IA. Any thoughts on why?
I?m also interested in what everyone is doing today regarding enforcing and auditing strength of SIP credentials. In our experience compromised devices leaking credentials are more of a threat than weak passwords but we?re on Broadworks and running secureTlktWeakPasswordsTool currently.
Thanks,
Dave Sill IT Director, Socket Telecom <https://www.socket.net> 573-817-0000 ext 211
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
In article <CAEu0Vi0Z9ki+TYq-7AkSYGf+-4pNE-m_-jfjk+jy0vRAV4oeSA at mail.gmail.com> you write:
Arbitrage scam, that's still one of those local monopolies most likely.
Killduff Telephone has one switch with two prefixes so, yeah, termination arbitrage. R's, John
On Fri, Dec 13, 2019 at 9:51 AM Dave Sill <dave at socket.net> wrote:
All,
We recently saw fraudulent calls via compromised SIP credentials to Killduff, IA. Any thoughts on why?
A crude analysis of wholesale termination decks for +1 641-741[1] reveals prices in the range of $0.019/min to $0.22/min, so yeah, termination arbitrage. [1] https://www.localcallingguide.com/lprefix.php?exch=039920 On Fri, Dec 13, 2019 at 12:49:01PM -0500, John Levine wrote:
In article <CAEu0Vi0Z9ki+TYq-7AkSYGf+-4pNE-m_-jfjk+jy0vRAV4oeSA at mail.gmail.com> you write:
Arbitrage scam, that's still one of those local monopolies most likely.
Killduff Telephone has one switch with two prefixes so, yeah, termination arbitrage.
R's, John
On Fri, Dec 13, 2019 at 9:51 AM Dave Sill <dave at socket.net> wrote:
All,
We recently saw fraudulent calls via compromised SIP credentials to Killduff, IA. Any thoughts on why?
_______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
-- Alex Balashov | Principal | Evariste Systems LLC Tel: +1-706-510-6800 / +1-800-250-5920 (toll-free) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
In article <20191213175459.GD1788 at tlaquepaque.localdomain> you write:
A crude analysis of wholesale termination decks for +1 641-741[1] reveals prices in the range of $0.019/min to $0.22/min, so yeah, termination arbitrage.
In article <CAEu0Vi0Z9ki+TYq-7AkSYGf+-4pNE-m_-jfjk+jy0vRAV4oeSA at mail.gmail.com> you write:
Arbitrage scam, that's still one of those local monopolies most likely.
Killduff Telephone has one switch with two prefixes so, yeah, termination arbitrage.
Does that mean that someone in Killduff is in on the scam, or do they do routing tricks so the calls don't actually go there? R's, John
On Fri, Dec 13, 2019 at 01:47:38PM -0500, John Levine wrote:
Does that mean that someone in Killduff is in on the scam, or do they do routing tricks so the calls don't actually go there?
Someone in Killduff is in on the scam, but perhaps with a level of plausible deniability inherent to revenue-sharing agreements. But the precise figments of routing that make this possible within the ICC/CABS environment after the 2011 FCC "USF/ICC Transformation Order" might be quite baroque. It's hard to say without the LERG handy. They might be using a CEA. I don't know. See FCC 19-94 for background info on these concepts: https://www.fcc.gov/document/fcc-adopts-reforms-further-reduce-access-arbitr... https://docs.fcc.gov/public/attachments/FCC-19-94A1_Rcd.pdf -- Alex -- Alex Balashov | Principal | Evariste Systems LLC Tel: +1-706-510-6800 / +1-800-250-5920 (toll-free) Web: http://www.evaristesys.com/, http://www.csrpswitch.com/
What's the famous line? "Follow the money" -----Original Message----- From: VoiceOps <voiceops-bounces at voiceops.org> On Behalf Of John Levine Sent: Friday, December 13, 2019 1:48 PM To: voiceops at voiceops.org Subject: Re: [VoiceOps] SIP Credential Strength / Domestic Fraud In article <20191213175459.GD1788 at tlaquepaque.localdomain> you write:
A crude analysis of wholesale termination decks for +1 641-741[1] reveals prices in the range of $0.019/min to $0.22/min, so yeah, termination arbitrage.
In article <CAEu0Vi0Z9ki+TYq-7AkSYGf+-4pNE-m_-jfjk+jy0vRAV4oeSA at mail.gmail.com> you write:
Arbitrage scam, that's still one of those local monopolies most likely.
Killduff Telephone has one switch with two prefixes so, yeah, termination arbitrage.
Does that mean that someone in Killduff is in on the scam, or do they do routing tricks so the calls don't actually go there? R's, John _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fpuck.nether.net%2fmailma...
Well, traditional end-office access charges are mostly not a thing anymore, so it has got a bit complicated to follow the money. An intermediate tandem of sorts used by the good country people?s salt-of-earth RLECs is sometimes involved, which is expressly what 19-94 targets. ? Sent from mobile, with due apologies for brevity and errors.
On Dec 13, 2019, at 1:56 PM, Mark Wiles <mwiles at akabis.com> wrote:
?What's the famous line?
"Follow the money"
-----Original Message----- From: VoiceOps <voiceops-bounces at voiceops.org> On Behalf Of John Levine Sent: Friday, December 13, 2019 1:48 PM To: voiceops at voiceops.org Subject: Re: [VoiceOps] SIP Credential Strength / Domestic Fraud
In article <20191213175459.GD1788 at tlaquepaque.localdomain> you write:
A crude analysis of wholesale termination decks for +1 641-741[1] reveals prices in the range of $0.019/min to $0.22/min, so yeah, termination arbitrage.
In article <CAEu0Vi0Z9ki+TYq-7AkSYGf+-4pNE-m_-jfjk+jy0vRAV4oeSA at mail.gmail.com> you write:
Arbitrage scam, that's still one of those local monopolies most likely.
Killduff Telephone has one switch with two prefixes so, yeah, termination arbitrage.
Does that mean that someone in Killduff is in on the scam, or do they do routing tricks so the calls don't actually go there?
R's, John _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fpuck.nether.net%2fmailma... _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
participants (5)
-
abalashov＠evaristesys.com -
caalvarez＠gmail.com -
dave＠socket.net -
johnl＠taugh.com -
mwiles＠akabis.com