Technical information

Small Business Communications Systems
5-54 Issue 7 June 2001
EXHIBIT 1 8/16/00
Toll Fraud Incident Report
Business Name:
Business Address:
Contact Name:
Main Number:
System Type:
Date Work Started:
Work Performed by:
Customer Approved Changes:
 Assigned all voice mail extensions to overseas Disallowed Lists.
 Created Disallowed List 6, which includes most commonly dialed numbers used by
hackers, and assigned to voice mail ports.
 Blocked calls to 011 (International) from all voice mail ports through Disallowed List
5.
 Blocked calls to 809 (Caribbean Area) from all voice mail ports through
Disallowed List 6.
Recommendations:
 Update Legend/Magix’s back-up.
 Transfer calls to known extension numbers only.
 Never transfer anyone to 90, 900, 500, 700, or to an outside operator.
 Outward restrict any unused extensions, including MFM’s (7300) A copy of the
extension directory is attached.
 Change all passwords frequently (including 9997 and 9999 and 9991, etc.)
 Delete all unused mailboxes.
 Have only the System Administrator transfer call to *10.
 CAUTION: Hackers may abuse your system through Voice Mail, Remote Line
Access, Remote Call Forwarding, Table 19 (Dial 0 for local operator), TIE Lines, T1,
access to 500 service and social engineering. To keep your system as secure as
possible, it is advised not to unrestrict any Toll Fraud security put into place!
 You may contact your Long Distance carrier and restrict 011 and 809 access, if
applicable.