MyNetPhone VoIP carrier subsidiary SymbioNetworks has revealed that it blocked over 10,000 attempts by scam operators to place fraudulent calls via compromised Australian routers and PABX systems during the holiday long weekend. Rene Sugo, chief executive of Symbio’s fraud detection software division, TollShield, said that the 10,655 fraudulent calls would have generated about 100,000 call minutes and an average loss of 50 cents each. Toll Fraud he said was a relatively invisible but very lucrative source of funds for highly organised criminal gangs (mostly operating out of poorly regulated Eastern Block countries). According to the Communications Fraud Control Association’s latest report on toll fraud, last year criminal stole $US38 billion dollars from telecommunications providers and their customers. “You could almost build a whole NBN just for the cost of the fraud globally,” Mr Sugo mused. Mr Sugo said that he was familiar with cases where businesses using compromised routers and PABXs had been hit with bills of up to $50,000 from fraudulent calls routed very their customer premise equipment. New Zealand telco Spark caused a furore last month when it announced that it would charge business customers $NZ2 per month to “protect” them from growing losses attributed PABX fraud (a common form of toll fraud) unless they chose to “opt-out”. Mr Sugo said that, privately, Australian carriers – and those in other jurisdictions that Symbio has spoken to – will admit the problem is common on their networks. However, officially, they won’t admit to having a problem. “That’s the official line from the big telcos… and technically what they’re saying is correct. They don’t have a fraud problem but their customers do. So, when a carrier says ‘(we) don’t have a fraud problem’ that typically means is that they enforce the billing on the end users so the end user gets hit. They’ve got records and they’ll take the hard stance about it,” Mr Sugo said. Australia’s peak telecommunications lobby group, Communications Alliance, did not respond to requests for comment. Telecommunications consumer advocacy, the Australian Communications Consumer Action Network, was also unable to respond to requests for comment due to a lack of information shared by carriers. Mr Sugo’s explanation of how the scams operate painted an alarming picture of the ease with which criminal gangs can orchestrate the fraud. Typically the gangs scan the internet for compromised routers and PABX systems, establish a flotilla of them and then purchase phone numbers in poorly regulated jurisdictions. They then on-sell call minutes at a discount rate via the numbers, which then appear on bills of victims at rates levied by their own providers. Some, Mr Sugo, said use the numbers to establish sex call lines and other information services charging up to $US5 per minute generating large profits. Telcos have barely any visibility on the cost of the fraud because they’re lost among billions of minutes tolled across international transit networks that can take them months to settle with other providers. The gangs have usually shutdown their operations and disappeared before local authorities can detect them, Mr Sugo said.Take this 5 minute survey on The State of Cloud Storage Collaboration 2016 and go in the draw to win a $500 Visa credit card.Start Survey NOW Related content news Multibillion-dollar cybersecurity training market fails to fix the supply-demand imbalance Despite money pouring into programs around the world, training organizations have not managed to ensure employment for professionals, while entry-level professionals are finding it hard to land a job By Samira Sarraf Oct 02, 2023 6 mins CSO and CISO CSO and CISO CSO and CISO news Royal family’s website suffers Russia-linked cyberattack Pro-Russian hacker group KillNet took responsibility for the attack days after King Charles condemned the invasion of Ukraine. By Michael Hill Oct 02, 2023 2 mins DDoS Cyberattacks feature 10 things you should know about navigating the dark web A lot can be found in the shadows of the internet from sensitive stolen data to attack tools for sale, the dark web is a trove of risks for enterprises. Here are a few things to know and navigate safely. By Rosalyn Page Oct 02, 2023 13 mins Cybercrime Security news ShadowSyndicate Cybercrime gang has used 7 ransomware families over the past year Researchers from Group-IB believe it's likely the group is an independent affiliate working for multiple ransomware-as-a-service operations By Lucian Constantin Oct 02, 2023 4 mins Hacker Groups Ransomware Cybercrime Podcasts Videos Resources Events SUBSCRIBE TO OUR NEWSLETTER From our editors straight to your inbox Get started by entering your email address below. Please enter a valid email address Subscribe