Hackers are now offering DDoS attack against Telecom Systems,with prices starting at just $20 per day.
DDoS against websites have been going on for many years. Attacks that swamped telecoms services are a much more recent innovation, first starting around 2010.
While DDoS attacks on websites are typically launched from botnets, attacks on telecom lines are launched using attack scripts on compromised Asterisk (software PBX) server.
Curt Wilson, research analyst at Arbor Networks said that cybercriminals are advertising “professional services” to anyone who’s willing to pay between $20 per day and $30 per hour to make sure that a certain phone is flooded with phone calls.
“Often, SIP flooding attacks take place because attackers are running brute-force password guessing scripts that overwhelm the processing capabilities of the SIP device, but we have also seen pure flooding attacks on SIP servers,” Curt Wilson said.
“Once the attackers obtain credentials into a VoIP or other PBX system, that system can become a pawn in their money-making scheme to perform DoS, Vishing, or other types of attacks.”
The expert reveals that the VoIP and the PBX systems are usually easy to penetrate because the access credentials are weak, being easy to crack with a brute force attack.
Telephone systems connected to the Internet can be brought down even by something as simple as a port scan, researcher explains.
"In such cases, an attacker could bring down an organisations' phone system quickly if they were able to reach the controller. "