Hanging on the Telephone: Hacking VoIP
summary
History of phone hacking traces from Captain Crunch whistles and blue boxes to modern SS7 exploits, but practical risks are current: IP phones register with a call manager for signaling while RTP streams flow peer-to-peer, enabling eavesdropping if VLANs are jumped. Attacks demonstrated include VLAN hopping, accidental and deliberate TDoS (including 911 outages), wide use of cleartext SIP/RTP, voicemail default-PIN compromises and toll fraud to Cuba, Somalia, Bosnia and Herzegovina, Estonia and Latvia. Mitigations cited: strict VLAN isolation, phone firewalling, MAC binding, DNS hardening and per-phone certificates.
AI-written summary · about
chapters (11)
- 0:00Intro
- 0:14THANK YOU, AMERICA!
- 6:24A HISTORY OF PHONE HACKING #1
- 9:46PHONE PHREAKING FUN FACTS
- 12:12VOIP 101
- 14:08VLAN HOPPING
- 15:48GOING CLEAR - VOIP PROTOCOLS
- 16:26TOLL FRAUD
- 17:29VISHING
- 18:04CONTACT CENTERS
- 19:05VOICEMAIL ATTACKS
related talks
01h 02mVoIP Wars: Attack of the Cisco Phones
53mVoIP Wars: the Phreakers Awaken
33mVoLTE Phreaking
30mMITM On PSTN: Novel Methods For Intercepting Phone Calls
26mBack to the Future. Cross-Protocol Attacks in the Era of 5G
30mAttacking Encrypted VOIP Protocols
56mHacking your Mind and Emotions
54mLifecycle of a Phone Fraudster: Exposing Fraud Activity