Cyber Defense eMagazine November Edition for 2021

The following signs may indicate a vishing attack:
• There is a great deal of urgency coming from the other end of the line.
• The hacker continuously requests that you provide the information to verify it.
• A call from a known number or an established company that you weren't expecting
• On Caller ID displays, you may see short and unusual phone numbers.
4. Weak Encryption Tools
Obviously, data packets carrying voice data must be encrypted from beginning to end in order to ensure
that they cannot be intercepted during transmission. You might encounter this at your network, your ISP,
or anywhere in between.
Due to the complexities of voice encryption and the fact that it varies depending on factors like the
sensitivity of the voice data you send, this is not something that's easy to understand. For this reason,
Cisco has recommended some basic encryption best practices for its customers, including:
• Balance encryption costs with business-specific requirements while keeping costs low.
• SIP over TLS implementations in your switch fabric should be enabled by your vendor.
• Encrypting mobile device calls with VPNs when packet encryption protocols are not available
(e.g., SRTP).
• A secure voice channel protected against eavesdropping during the transmission of packets over
public networks.
Cloud security is threatened by APIs by their very nature. You can customize the features of the cloud to
match your business needs. They also authenticate users, provide access, and take steps to encrypt
data. A comprehensive protection strategy can provide you with all these benefits.
Using encryption is one way in which you can protect your data. Due to this, having a holistic approach
to end-to-end encryption is important instead of focusing on both your vendor and network separately.
You will be better prepared to handle any potential threats this way.
5. VOMIT and SPIT
It may sound like a gross acronym, but VOMIT describes a serious threat to any business. Criminals can
steal sensitive information and voice packets straight from calls by using a tool called "Voice over
Misconfigured Internet Telephones." In addition, they can also find out where the call originated, which
they can use later in order to intercept everything you say.
The SPIT method consists of sending voicemails or automated calls several times a week. Because
spammers have access to so many different tools, they can easily send many messages at once to
several IP addresses or pretend to be local businesses when they are actually foreign companies.
If the call is answered, the recipient may end up being redirected to a very expensive phone number from
another country, or the messages may contain viruses or spyware.
Cyber Defense eMagazine – November 2021 Edition 61
Copyright © 2021, Cyber Defense Magazine. All rights reserved worldwide.