AusCERT: Cisco IP phones prone to hackers

Powered by SC Magazine
 

Read the manual and switch off web services, say white-hat hackers.

Contact centres and businesses using a popular make of internet phone were at risk of having their communications intercepted and confidential information leaked, a hacking group demonstrated.

Security consultant Chris Gatford showed SC Magazine how internet-protocol phone systems from market leader Cisco were vulnerable out of the box to attacks that were widely known. He said customers of his had lost $20,000 a day through such exploits.

A Cisco spokesman said the networking vendor was serious about security and advised users to apply the relevant recommendations in the manual to secure their systems.

Gatford said VoIP phone systems could turn on their users, hacked to become networked listening devices or 'bugs', wiretapped remotely or silenced, blacking out communications. Contact centres that often use internet-protocol phones because they were cheap to run, were especially at risk, he said.

“It is the closest attack in a real world environment that mimics so many of the scenes Hollywood likes to show us” Gatford said.

“You can imagine if you’re an employee who wants to listen into the boss during a meeting, that the phone in the conference room will be a target.”

Gatford, director of the Sydney penetration tester HackLabs, demonstrated how phone conversations were illictly recorded, injected with sound or redirected including expensive and elusive offshore premium numbers.

Similarly, a distributed denial-of-service attack could take a phone fleet offline, said Gatford, who had seen them cripple networks at Australian companies.

The weaknesses result from Cisco's reliance on web functions that gave users functions at the cost of easier penetration for hackers.

He said businesses usually only fixed their networks once they were hacked: "When [voice over internet protocol] security is considered, a crucial area to assess is risks”.

But HackLabs penetration tester Peter Wesley said organisation administrators shared the blame because they fail to read security manuals.

“The book says to shut off web services,” Wesley said. “Who’s going to read all that?”

Western Australian police reported attacks on VoIP phones this year cost three businesses $70,000, and in 2009 criminals rang up phone bills exceeding $120,000.

“Security of the phones and infrastructure isn’t something that is usually considered,” Wesley said.

HackLabs will present a VoIP hacking workshop at AusCERT next week that combines theory and a hands-on attack lab on an IP phone network.

Copyright © SC Magazine, Australia


AusCERT: Cisco IP phones prone to hackers
Penetration testers reveal holes in Cisco VoIP phones, and exploit them to rick-roll users.
 
 
 
Top Stories
Beyond ACORN: Cracking the infosec skills nut
[Blog post] Could the Government's cybercrime focus be a catalyst for change?
 
The iTnews Benchmark Awards
Meet the best of the best.
 
Telstra hands over copper, HFC in new $11bn NBN deal
Value of 2011 deal remains intact.
 
 
Penetration testers reveal holes in Cisco VoIP phones, and exploit them to rick-roll users.
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Who do you trust most to protect your private data?







   |   View results
Your bank
  38%
 
Your insurance company
  4%
 
A technology company (Google, Facebook et al)
  8%
 
Your telco, ISP or utility
  8%
 
A retailer (Coles, Woolworths et al)
  3%
 
A Federal Government agency (ATO, Centrelink etc)
  19%
 
An Australian law enforcement agency (AFP, ASIO et al)
  14%
 
A State Government agency (Health dept, etc)
  6%
TOTAL VOTES: 1882

Vote
Do you support the abolition of the Office of the Information Commissioner?