PC hacking though VoIP is possible
Source: voipcentral.org
Hackers can now hack your PC through IP telephony. The so-called safe and secured voice over protocol (VoIP) devices such as Linksys SPA-941 can be hacked by a buffer overflow exploit through the embedded web server using the Session Initiation Protocol (SIP).
Radu State, a security researcher has noted of computer hacking via SIP by carrying out a cross-site scripting (XSS).
According to State, hacking risks are more over the SIP as most internal networks can defend themselves XSS attack. Considering the fact that most business firms use VoIP devices without proper authentication to save costs are at the mercy of hackers now. Though this incident of hackers using SIP is singular, it can be the first in a series of such attacks.
VoIP hacking has also been found in the past. One such case was Edwin Pena who made more than $1 million by routing his telephone companies calls though other service providers VoIP. Also, the availability of VoIP hacking tools over the Internet can lead many such crimes in future.
Security researchers do provide some hopes of prohibiting such crimes and making the devices more secured with the help of firewalls, reputation-based defenses and anti-malware scanning software.
Source: informationweek
Image source: cbc
