One of our customers who sells SIP trunking services is getting a lot of fraudulent calls from one or more customers who have Allworx PBXs. Their understanding is that the Allworx PBX has a back door for technical support access and this has been compromised. We have not verified this information about the Allworx compromise, but we have witnessed the fraudulent calls. Does anyone have more information on this matter? Thank you, Jim Dalton TransNexus
A lot of our Allworx customers have open web management ports on the same IP as their SIP endpoint is at. I wouldn't be shocked. On May 11, 2013, at 5:54 PM, "Jim Dalton" <jim.dalton at transnexus.com> wrote:
One of our customers who sells SIP trunking services is getting a lot of fraudulent calls from one or more customers who have Allworx PBXs. Their understanding is that the Allworx PBX has a back door for technical support access and this has been compromised. We have not verified this information about the Allworx compromise, but we have witnessed the fraudulent calls. Does anyone have more information on this matter?
Thank you,
Jim Dalton TransNexus _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
They have a release note about the recent hacking into the Allworx systems. You will need to upgrade your customers to the latest firmware and then they instruct you on changing the handset passwords. (I believe) Sent from my iPhone On May 11, 2013, at 4:54 PM, "Jim Dalton" <jim.dalton at transnexus.com> wrote:
One of our customers who sells SIP trunking services is getting a lot of fraudulent calls from one or more customers who have Allworx PBXs. Their understanding is that the Allworx PBX has a back door for technical support access and this has been compromised. We have not verified this information about the Allworx compromise, but we have witnessed the fraudulent calls. Does anyone have more information on this matter?
Thank you,
Jim Dalton TransNexus _______________________________________________ VoiceOps mailing list VoiceOps at voiceops.org https://puck.nether.net/mailman/listinfo/voiceops
participants (3)
-
jim.dalton＠transnexus.com -
kadams＠irontonglobal.com -
paul＠timmins.net