VOIP voicemail hacked aka DISA toll fraud

[JaredBusch]

By default it does not work unless someone goes into this hard to find setting and populates it.

If you dial into my voicemail with my password and hit option 3 for advanced options, the only valid choice is option 5 to leave a message for another extension. There is no way to break out of it. Hitting option 4 kicks it back to the initial mailbox menu.

[scottalanmiller]

@JaredBusch that's what I thought. As I look at our systems, none seem to have any susceptibility to this kind of attack. Maybe Cisco doesn't out of the box and someone enabled this ridiculousness? That seems unlikely, but who knows.

[FATeknollogee]

For me, I do auto funding but only in the range of $50-80 per hit.
This way I get alerts on my iPhone from my c/c every time a VOIP replenish charge goes through.

I also have International calls disabled.