dnrestcom - The simplest way to learn!

"The recent attacks were conducted by hackers exploiting a security vulnerability in Asterisk software. [...] The vulnerability can be exploited by cyber criminals to use the system as an auto dialer, generating thousands of vishing telephone calls to consumers within one hour," reads IC3's warning.

John Todd, Digium's community director, has written a response on the company's blog in which he notes that "the nature of the warning is extremely vague, and has left us guessing as to what the exact issue is that they reference, and how Asterisk is involved." He admits that the company and the developers of the open source version of the Asterisk platform are unaware of any new vulnerability that might fit the description in the FBI warning.

 Continue reading...