HACKING 4645

[jpissot]

Hi,

An OXE R8.1 has been hacked. They are done a lot of internationals calls.

By studying the account tickets, we can see that they used the 4645 VM to call.

I think that they are used "Public Network Caller Callback".

Someone can explain me how they can do because I've tried to call the VM, but I dont find the menu for callback.

Thank you for your help.

[tot3nkopf]

4645 Classes of service --> Class --> Outcall notification
You should disable direct access to voice mail from outside also. Check also for possible access through 4645 automated attendant.

There is a technical communication regarding Voice Mail security measures that can be implemented. Look for it on ABPS.

[jpissot]

OK.

I ve disable Outcall Notification and Callback when the customer has contacted me.

But I would like to know how the hackers do to activate callback?

Thanks

[tot3nkopf]

But I would like to know how the hackers do to activate callback?
Thanks

Do you use menu on set feature?
Check also the transfer from 4645 automated attendant...(Connection COS restricted?)

[cavagnaro]

Using DISA is one way. Other is asking for an external extensions

Sent from my XPeria Z

[jpissot]

I dont use menu on set and there is not AA on 4645.

[cavagnaro]

Ask Alcatel then...

Sent from my XPeria Z

[gelax]

I think that problem is "Auto Attendant Pub Net Transfert" set to "True". This parameter is very Dangerous because permit to calling an external number from any menu of voicemail with function of helper. I had same problem !!!

[Maulwurf]

can you explain please

[gelax]

When you call Voicemail,press * and 0 + prefix to access to external line + number from main menu of voicemail, with option "Auto Attendant Pub Net Transfert" you can call any external number, naturally depend from right of cos.
Voicemail use Cos 0 and Entity 0, this parameter are unchangeable.