[VOIPSEC] Phone fraud doubles

[Zubair Rafique]

I am more interested in analyzing cyber criminals (involved in phone fraud)  activities through active approach. Blacklisting IPs or extracting features (like in pindr0p etc) are useful to detect frauds but are passive approaches.  I wonder if someone has any thoughts on it? How to probe phone fraudsters before even they start doing malicious stuff?

M Zubair Rafique



On Thursday, November 21, 2013 4:08 PM, Sergey Kolesnichenko <sergey at ucallweconn.net> wrote:
 
Which lists are you asking about? Faudsters... they are here! Right in this
mail list. They will get the shared list and will use it to be able to
bypass it.


2013/11/21 Philip Veale <email at philipveale.com>

> On 21 November 2013 14:02, J. Oquendo <sil at infiltrated.net> wrote:
> > E.g.: Palestine has been ramping things up via VoIP attacks.
> > What I notice is these attackers try to call numbers whose
> > carrier is owned by another Palestinian elsewhere. And it
> > is not isolated to Palestine, they happen to be the heavy
> > hitters via my logs this quarter.
>
>
> We've noticed this lately too. What we're looking at doing now is
> maintaining a list of all known IP address blocks / networks
> associated with the Palestine Territories / Gaza & blocking them at
> the border routers.
>
> (does anyone out there already maintain such a list they wouldn't mind
> sharing?)
>
> I don't really like the profiling but it's just a matter of mitigating
> risk to the business.
>
> We're a fairly small UK company and we've had 3 fraud attempts in the
> past 2 weeks, at least 2 of which were directly traceable to
> Palestine.
>
>
> There's always been a  small level of background fraud attempts but
> it's certainly elevated in the past 6 weeks.
>
> _______________________________________________
> Voipsec mailing list
> Voipsec at voipsa.org
> http://voipsa.org/mailman/listinfo/voipsec_voipsa.org

>
_______________________________________________
Voipsec mailing list
Voipsec at voipsa.org
http://voipsa.org/mailman/listinfo/voipsec_voipsa.org