Voice over Internet Protocol (VoIP) networks are vulnerable to a wide range of scams and fraudulent activities, including theft of service. In this article, we discuss what theft of service is and how it impacts businesses' VoIP networks. We also provide tips on how organizations can prevent or reduce the risks of this type of scam.
What is theft of service?
VoIP theft of service is the most common type of VoIP fraud. It involves the theft of an organization’s VoIP account credentials, including usernames and passwords, either by eavesdropping or by introducing malware into a phone system. Once cybercriminals gain access, they can make phone calls or change business call plans and run up a VoIP bill, which is why this attack is referred to as “subscription fraud.”
In addition, cybercriminals may use the stolen data to carry out other fraudulent activities. They can use theft of service to flood a VoIP network with promotional calls (similar to junk email) via an attack called "Spam over Internet Telephony," or SPIT. Once criminals infiltrate a communications network, they may broadcast unsolicited messages or advertisements over the VoIP system. This keeps users from making or receiving calls, which can have a significant impact on business operations.
How can you avoid theft of service?
Preventing VoIP theft of service simply requires using a little common sense and implementing the following technical preventive measures:
- Make passwords as secure as possible. Passwords must be at least 10–12 characters long, consisting of a combination of upper- and lowercase letters, numbers, and symbols. For added security, use passphrases, which are sentence-like strings of words. They’re usually longer than passwords, easier to remember, and more difficult to crack.
- Install firmware patches for VoIP phones and infrastructure regularly, and keep antivirus software up to date.
- Use fraudulent call routing detection and encryption software.
- Set up an enterprise-grade virtual private network (VPN) for employees working from home/remotely. A VPN encrypts incoming and outgoing traffic without compromising call quality.
- Review your organization’s call logs for any unusual trends or behavior, such as higher-than-usual call volumes or calls made during off-hours.
VoIP is an essential business communication tool, so it is worthwhile to learn about risks and set safeguards against theft of service. For more information and useful tips on how to keep your VoIP system secure, drop us a line today.
