Feeds

Forgotten war dialling risk leaves networks in peril

Modem madness

  • alert
  • submit to reddit

The Essential Guide to IT Transformation

War Dialling, the scanning of telephone lines to find insecure modems that provide a back door route into corporate networks, is ignored as a risk by many organisations, security testing outfit NTA Monitor warns. The company is calling on organisations to revise their procedures to guard against the long established, but still serious, security risk.

A survey conducted by NTA Monitor between August and September to ascertain awareness among IT and security managers about War Dialling discovered 22 per cent of those questioned having no knowledge of the issue.

Almost a quarter (24 per cent) of respondents to the survey reported that there were unauthorised modems attached to systems at their sites. One respondent believed there might be as many as 20 modems over which he had no control running over a particular company's network.

According to NTA Monitor, modems are found at the end on average at 0.75 per cent of a corporate organisation's telephone number range. For example, a mid-sized company with a range of 10,000 numbers will typically contain 75 modems.

"This should cause major concern, as it only takes one insecure modem to permit a hacker to gain access to an organisation's systems," said Roy Hills, NTA Monitor’s technical director. "Imagine the situation for a company with 5,000 extensions over 20 sites - how can they ever be sure that no rogue modems are attached to any of those lines, without testing them?"

Crackers exploiting War Dialling use an automated PC and modem application to scour a company's switchboard range for insecure modem connections.

"War Dialling originally emerged as an issue in the early 80s when organisations relied on modems to exchange data between systems. We believe it has largely been forgotten about when in reality it is a technique that hackers are revisiting as a reaction to increased security in corporate networks," Hills added.

A third (34 per cent) of organisations questioned said they had found unauthorised modems in the past. Despite this 68 per cent of organisations report that they had no controls in place to detect modem scanning attempts on their systems. This means they have no way of knowing if they've been the target of an attack or if they have any insecure modems attached to systems at their site, NTA Monitor argues.

NTA Monitor recommends that organisations use a PBX firewall, PBX log or other such control in place to keep track of any attempts to hack into your system using a War Dialling technique. It also advises management to raise awareness of War Dialling amongst staff as a security issue by educating staff of the risks of attaching modems to the network and by tying modem security policies into staff contracts.

NTA Monitor's report is here. ®

Related Stories

UK plc neglects basic VPN security
Crackers favour war dialling and weak passwords
Study: Wi-Fi users still don't encrypt

Build a business case: developing custom apps

More from The Register

next story
14 antivirus apps found to have security problems
Vendors just don't care, says researcher, after finding basic boo-boos in security software
'Things' on the Internet-of-things have 25 vulnerabilities apiece
Leaking sprinklers, overheated thermostats and picked locks all online
Only '3% of web servers in top corps' fully fixed after Heartbleed snafu
Just slapping a patched OpenSSL on a machine ain't going to cut it, we're told
How long is too long to wait for a security fix?
Synology finally patches OpenSSL bugs in Trevor's NAS
Secure microkernel that uses maths to be 'bug free' goes open source
Hacker-repelling, drone-protecting code will soon be yours to tweak as you see fit
Israel's Iron Dome missile tech stolen by Chinese hackers
Corporate raiders Comment Crew fingered for attacks
Roll out the welcome mat to hackers and crackers
Security chap pens guide to bug bounty programs that won't fail like Yahoo!'s
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
Researcher sat on critical IE bugs for THREE YEARS
VUPEN waited for Pwn2Own cash while IE's sandbox leaked
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Backing up Big Data
Solving backup challenges and “protect everything from everywhere,” as we move into the era of big data management and the adoption of BYOD.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Why and how to choose the right cloud vendor
The benefits of cloud-based storage in your processes. Eliminate onsite, disk-based backup and archiving in favor of cloud-based data protection.