Police in Hambleton have issued a warning to businesses to make sure their phone systems are secure.
This advice follows a recent fraud investigation which has cost a local business in excess of £20,000.
The scam works when the fraudsters hack into the businesses’ internal phone network to gain control of the administrator’s access code. They then set the system to divert any unanswered calls to a premium rate number.
Because it is the businesses’ phone system which is diverting the call, they are charged and not the fraudsters.
PC Nick Hill, of Northallerton Safer Neighbourhood Team, said:
This type of fraud is mainly committed when offices are not staffed such as at night or during holiday periods.
I urge business owners to ensure that they have the best possible security in place to protect their phone networks. And if they don’t need to use the divert facility, they should contact their service provider to ensure that it is fully disabled.”
If you have been a victim of this type of fraud please contact North Yorkshire Police.
Ross Knapman of Deep Blue Telecom in Wetherby commented:
When people think of phone hacking you probably think of the current news reports of newspapers allegedly gaining access to the phones of celebrities and politicians to gather information. What you may not think of is criminals hacking into the phone system of your businesses until it is too late.
Once access has been gained to a company’s network, this can be used to illegally route calls, either to make international calls or even to generate revenue from premium rate numbers, all at the expense of the hacked company. It is the latter that has recently been done to some companies in the Harrogate area.
Usually after the companies have closed (often at weekends or bank holidays to help avoid detection) the hackers have gained access to the network and called premium rate (09) and special rate (0871) numbers which they earn revenue from. In some cases this revenue is used to fund organised crime and terrorist activity.
A case in America that made it to court uncovered an international crime gang that had access to over 2,500 PBX’s and had illegally routed calls to the value of $55million dollars. Another case of note, and probably the most high profile UK victim was New Scotland Yard.
The average call charges faced by a company hit by this type of hacking is £10,000, but one company that was hit over the New Year weekend had £25,000 of call charges generated.
As you can see by the figures above, phone hacking is a serious crime and in all cases we advise affected parties to notify the police as soon as the hack is brought to their attention. The called numbers should be reported to Ofcom and Phonepay Plus.
As with computer hacking, there are measures to reduce this risk of being hit, however as fast as these measures close one door, the hackers find ways to open another.
One of the main ways access is gained is through services such as voicemail which allow you to dial into a network externally, but there are simple steps that can be taken to reduce the risk of this happening. Ensure all ways of accessing your network are password protected (just as you would put a password on your wireless internet network), change these passwords often, don’t share passwords, make passwords as long and complicated as possible (many hackers have sophisticated methods that can crack passwords 16 digits long) and keep all access codes secure (some victims had calls from individuals claiming to be from telephone companies asking codes to do work on the network or to update their security).
It is also worth considering what kinds of calls you make; does your business need to be able to call premium rate or international numbers? If not, consider call barring features so if your network was compromised, it would be harder for extensive call charges to be built up.
If phone hacking is something you are concerned about or if you would like to discuss this further, please email Deep Blue Telecom at info@deepbluetelecom.co.uk
Anyone who has information about people committing this type of fraud should contact North Yorkshire Police on 101 and select option 1. or call Crimestoppers anonymously on 0800 555 111.
