[VoiceOps] SIP Credential Strength / Domestic Fraud

2019-12-13 Thread Dave Sill
All, We recently saw fraudulent calls via compromised SIP credentials to Killduff, IA. Any thoughts on why? I’m also interested in what everyone is doing today regarding enforcing and auditing strength of SIP credentials. In our experience compromised devices leaking credentials are more of

Re: [VoiceOps] SIP Credential Strength / Domestic Fraud

2019-12-13 Thread Carlos Alvarez
Arbitrage scam, that's still one of those local monopolies most likely. On Fri, Dec 13, 2019 at 9:51 AM Dave Sill wrote: > All, > > We recently saw fraudulent calls via compromised SIP credentials to > Killduff, IA. Any thoughts on why? > > I’m also interested in what everyone is doing today r

Re: [VoiceOps] SIP Credential Strength / Domestic Fraud

2019-12-13 Thread John Levine
In article you write: >Arbitrage scam, that's still one of those local monopolies most likely. Killduff Telephone has one switch with two prefixes so, yeah, termination arbitrage. R's, John > > >On Fri, Dec 13, 2019 at 9:51 AM Dave Sill wrote: > >> All, >> >> We recently saw fraudulent call

Re: [VoiceOps] SIP Credential Strength / Domestic Fraud

2019-12-13 Thread Alex Balashov
A crude analysis of wholesale termination decks for +1 641-741[1] reveals prices in the range of $0.019/min to $0.22/min, so yeah, termination arbitrage. [1] https://www.localcallingguide.com/lprefix.php?exch=039920 On Fri, Dec 13, 2019 at 12:49:01PM -0500, John Levine wrote: > In article > yo

Re: [VoiceOps] SIP Credential Strength / Domestic Fraud

2019-12-13 Thread John Levine
In article <20191213175459.GD1788@tlaquepaque.localdomain> you write: >A crude analysis of wholesale termination decks for +1 641-741[1] reveals >prices >in the range of $0.019/min to $0.22/min, so yeah, termination arbitrage. >> In article >> you >> write: >> >Arbitrage scam, that's still one

Re: [VoiceOps] SIP Credential Strength / Domestic Fraud

2019-12-13 Thread Alex Balashov
On Fri, Dec 13, 2019 at 01:47:38PM -0500, John Levine wrote: > Does that mean that someone in Killduff is in on the scam, or do they > do routing tricks so the calls don't actually go there? Someone in Killduff is in on the scam, but perhaps with a level of plausible deniability inherent to reven

Re: [VoiceOps] SIP Credential Strength / Domestic Fraud

2019-12-13 Thread Mark Wiles
What's the famous line? "Follow the money" -Original Message- From: VoiceOps On Behalf Of John Levine Sent: Friday, December 13, 2019 1:48 PM To: voiceops@voiceops.org Subject: Re: [VoiceOps] SIP Credential Strength / Domestic Fraud In article <20191213175459.GD1788@tlaquepaque.localdom

Re: [VoiceOps] SIP Credential Strength / Domestic Fraud

2019-12-13 Thread Alex Balashov
Well, traditional end-office access charges are mostly not a thing anymore, so it has got a bit complicated to follow the money. An intermediate tandem of sorts used by the good country people’s salt-of-earth RLECs is sometimes involved, which is expressly what 19-94 targets. — Sent from mobil