Severe Thunderstorm Watch expires at 4:00 AM on 5/21, issued at 1:43 AM Byhalia, MS | Dundee, MS | Hernando, MS | Holly Springs, MS

Hackers Hit DeSoto Phone System, Run Up $23K Bill

Reported by: Shelley Orman
Set Text Size SmallSet Text Size MediumSet Text Size LargeSet Text Size X-Large
Share
Updated: 8/30/2012 6:33 pm
DESOTO COUNTY, MS (abc24.com) - The phone bill for DeSoto County government is more than $23,000 higher this summer. The extra charges were racked up by hackers who infiltrated the system and made a lot of international phone calls. The county is now, to no surprise, rethinking its security.

Phone companies say hackers have hit several different counties all over northern Mississippi. It only takes a few hours to run up huge phone bills.

"At 2 a.m. one morning they dialed in," says John Mitchell, the county's IT Director. DeSoto's government offices were hit in June. The hacker's trail is complicated and virtually untraceable.

"They were dialing into phone systems and would use that system to dial into another phone system and dial into another phone system eventually the destination call ends up in central Africa." Calls were going to the tiny nation of Comoros, an island off Africa's eastern coast. Victims, like DeSoto County, were left with a hefty receipt.

"$23,000 for 181 minutes worth of phone calls," Mitchell explains. At $20 or more per call, he says the charges rang up quickly. The county could have been held liable.

"We were also allowing international calling, which was unbeknownst to us until we found out the fraudulent things," he says. "That's what they preyed on and were able to guess somebody's password."

Luckily, the phone company recognized the fraud and Mitchell just worked out a deal canceling the debt. "Part of the agreement to forgive it is for us to make sure we're closing any loopholes."

The county is requiring employees to set new, hard-to-guess voicemail passwords. International calls are now forbidden. Mitchell says there's a lesson to be passed on from this.

"People think you just pick up the phone and make a call," he says. "They don't realize there are features in the system someone can take advantage of."

Mitchell says some Mississippi counties had bills over $100,000. The hackers also struck in Tate and Panola counties. So far no one's had any luck tracing the source.

Share
2 Comment(s)
Comments: Show | Hide

Here are the most recent story comments.View All

The views expressed here do not necessarily represent those of abc24 News

Risk Advisor - 9/5/2012 3:06 PM
0 Votes
Organizations "have no idea how significant the risk of toll fraud is until they're hit" unless they have tools to detect the attack. The toll fraud threat has been around for a long time. The software to detect, block and prevent such an attack is here. Voice network security is another network from which cyber villains can penetrate your already secured networks through any number of malicious schemes. Scanning a few times a year no longer is sufficient protection either. An attack can come at any time. Monitoring the network with an effective tool is the solution to expensive, irreversible losses in today's cyber landscape of threats. Knowing what is at risk is the first step. ~Vaune M. Carr, CISSP, ISSMP-ISSAP

Crockett Comm - 9/3/2012 12:44 PM
0 Votes
So many businesses and organizations have no idea how significant the risk of toll fraud is until they're hit. There are obviously precautions you can take, and having solid passwords, changing system default passwords is critical: http://www.phone-system-insight.com/toll-fraud.html
Inergize Digital This site is hosted and managed by Inergize Digital.
Mobile advertising for this site is available on Local Ad Buy.