Toll Fraud issues

[acejavelin]

I have a customer who has a 3300 v4.2 who has been getting a lot of VM toll fraud lately, hackers are getting into mailboxes and changing the operator extension to various 011 or out of country area code numbers. Besides restricting the COR of the VM extensions and the COR of the trunks (for Trunk-Trunk transfer) they want to change the VM passcode length in the embedded VM. What I am wondering, is if we go into the VM and change the System Passcode length, how is it handled to the users? Are all mailboxes returned to the default passcode or the next time the user logs in are they forced to change their passcoode to one that conforms with the new length, or what, and how is the admin/operator mailboxes affected, we already changed all levels of passcodes on those mailboxes from the default?

[johnp]

If I remember correctly, you will need to add a trailing zero to the passcode

[ralph]

Speaking of fraud, We have a hotel that just got set up.
The manager insisted on setting all trunks to ring to AA and then allow them to dial rooms.

Caller calls in, gets a room and tells the guest that their database crashed and they need to re-verify their credit cards and drivers license info.
They also told them not to come to the front desk because there was a long line.
Eight people gave up the details.

Ralph

[acejavelin]

Yeah, I have heard of this scam but haven't seen it around here... guess hotels have the same issue as us at times, a tech I work with always says "We need smarter customers..."

[martyn]

Interesting way if you detect that someone has been hacked is to lock it down, etc, but then set the operator number to call when they ring in to that mailbox to be the local police station. 

[bobcheese]

Hey Ace. System add 0's to the existing code if you increase the passcode so an old 4 digit passcode of 6767 is now 676700 if you change to 6 digit.
If you ask me, the only way to make sure 100% the admin cant be hacked is to upgrade to 5 and then turn off the admin mailbox in the vmail options assignment.

[acejavelin]

Yeah, that is in the works for winter break. I just didn't know how the system handled a passcode length change, I will pass it along to the IT Manager at the site and see if he wants to change it, thanks for the info.