We have many, many OfficeServ systems out there using SIP accounts for outgoing calls.

Recently we have had two customer's receive bills in the thousands of dollars for international calls they obviously did not make. I am aware of hacking through the voice mail and this is programmed out of the systems, and the voice mail logs show no call attempts through the voice mail.

When looking at the billing from the carrier, there are obviously more calls being made simultaneously than the phone system will support.

The Carrier is stating its the customer's equipment at fault, we believe they are logging directly into the carrier's network, so they must have gained the username and password for the account. But where from is the question? If it were our office that was compromised I would imagine it would be a lot more than just 2 (of hundreds) customers, and the phone systems whilst they are accessible via remote programming are secured with secure passwords.

Any one had this issue before and able to prove it was not the customers equipment? Carrier is simply saying they have to pay and are not interested in trying to resolve how they got in.

Cheers, Dave.
Eco Communications
Selling and installing Ericsson BP150/50/250 from 1996 to 2005
Samsung selling and installing since 2000
Toshiba selling and installing since 2004
Microsoft NT and SQL certified (10 years ago...)