If the system has mobile users logging in from a dynamic IP address, consider instead utilising a third-party tool to create a blacklist of IP addresses that have been identified as potential threats.

By restricting access to telephony resources from internal IP addresses, only people within the authorised network will be able to place calls or send messages. If the phone system has a static IP address, consider enabling authentication for outbound calls as a way to secure the account. Enable IP-based authentication for outbound calls When this tool is in place, it will override any maximum default rate settings. When this is enabled on the account, only countries on the strict whitelist can be called, regardless of the maximum outbound rate in place. This tool can be adjusted as needed to meet the needs of the company and its customersвЂ™ dynamic traffic patterns.ДЄnother option is to use a strict destination whitelist tool. Defining countries on this list will set security parameters to avoid charges that result from a breach or hack. Define the countries on your destination whitelistДЄ destination whitelist allows businesses to choose countries that users can call regardless of the outbound rate. This rate can be updated as traffic patterns change, but the more precise that a company can be in determining its rates, the more effective it can be in catching fraudsters before they can wreak havoc on an account.

Assessing the normal traffic levels can help determine the rate cap that a business might be comfortable setting. Set a maximum default rate for outbound callsДЄ maximum default outbound rate will block any call to a destination that exceeds the predefined scale or parameters. These check-ins are imperative to protect the account(s) from fraudsters roaming the web looking for easy targets. If a business operates one or more PBX systems on public IP addresses, itвЂ™s critical to conduct an annual security audit of the system(s) to ensure that fraud controls are still aligned with traffic patterns. To compound matters, many attacks occur during off-peak hours, such as on holidays or on the weekends, when a fraud attack could go undetected for hours, if not days вЂ“ costing businesses potentially hundreds of thousands of dollars.ДЄ well-known example of this was when a small, seven-person architecture firm was hacked over a holiday weekend in 2014, racking up a massive phone bill of more than $160,000 after fraudsters routed calls from the company to numbers in Gambia, Somalia and the Maldives.Д«usinesses can avoid falling victim to attacks such as these by considering a few simple but effective best practices when assessing whether their current IP communications carrier offers the best protection for their network and communications services.

This type of fraud also includes voicemail hacking. Identity fraud and caller ID spoofing, where hackers impersonate a business or individual and misattribute calls from their account.Black/grey routes, where hackers steal and potentially resell SIP trunking accounts.Inbound toll-free abuse or fraud, which places calls to individuals and plays confusing or difficult-to-hear audio, forcing call recipients to stay on the line longer while they try to figure out whatвЂ™s happening.Premium route fraud, which routes calls to premium-rate (mostly international) destinations or to newly announced destinations that do not have updated rate decks.The financial impact of telecom fraud is massive вЂ“ costing the industry more than $38bn a year, according to a global survey by the Communications Fraud Control Association in 2015.ДЇurther, the aftermath of a security breach grows exponentially when factoring in damage to a companyвЂ™s customer relationships, and tarnished reputation.Д«usinesses that have, or are looking to integrate, IP-based communications should be wary of the four common types of VoIP fraud:

Al Castle, VP of product and engineering at Flowroute, gives his top tips to protect your business. As the popularity of IP-based enterprise communications continues to grow, the threat of fraud also rises.

Grow castle hack 2018