It was only a test

Nov 26, 2007 10:55 GMT  ·  By

Don't get too excited thinking that you'll find a hacking tutorial around here because Softpedia is not encouraging hacking or any other illegal activity. In fact, there's nothing illegal about today's piece of news since it was only a test conducted by the UK VoIP expert Peter Cox. According to VoIP News, Peter Cox developed a program which, once installed on a company network, automatically records the VoIP phone calls along with all sorts of details such as callers and dates. The entire exploitation would be pretty simple because all the hacker would need is a Trojan horse including the program installed on the victims' computer. Once installed on a system inside the network, the attacker can record all the VoIP conversations in the network.

"We are in the early days of VoIP, but there is a knowledge gap. Companies using VoIP internally think they are protected," Peter Cox told PC World. "The threat is that an attacker engineers a Trojan and has it sit there passively [on a network], recording calls from anywhere on the Internet."

Many of the companies that rely on VoIP technologies think they are secure and nobody can listen to their conversation because they are pretty well protected. Even the authorities acknowledged it as the German police aimed to monitor Skype's calls in order to obtain incriminatory evidence about some suspects. "Apply the same vigour when building a VoIP network you would when building a website," the VoIP expert tried to find a solution to avoid a potential attack.

The VoIP competition tends to become more popular on a web looking for better features and functions bundled with improved quality and high security. In fact, most software developers get focused exactly on these features, some of them really managing to implement them into their products. But it seems this is not enough...