sundance-communications.com/forum Forums TDM Business Telephone Systems Panasonic Telephones & Systems TVA-200 hacked?

I installed a KX-T1232 and TVA-200 in one of
my university's offices in NYC.

Recently I found out that Verizon had shut off
international access on the trunks due to some
suspicious calls made to Cuba ( untypical for us ).
Verizon ( and AT&T) suggested that the voicemail
system might have been hacked...

The installation is pretty close to defaults - nothing fancy. I checked the VM settings last night
and it does not appear ( from what I know anyway)
that anything is changed - all the settings
related to Call Forwarding to outside are "disabled"...etc..

Can anyone point me to specifics to check on?
The "hacking" occurred only once, last Friday
evening for a 3 -hour period. Even funnier:
Whoever made the calls apparently did so on a
"1010" card ( which means we weren't charged?).

Thanks guys,

on your voice mail system go into the report section and check for any new voice mailboxes and ANY message settings for phone notifyication on any mb # then go into that mailbox programming and check for the phone numbers there will be two or 3 affected boxes

The Panasonic does have a feature that lets a travelling employee call into the office and then make outbound calls. Make sure that feature is disabled.

It sounds to me like a maintenance person used a phone to call home. Ten Ten calls (1010) will appear on your bill if a toll call was made. Sometimes it takes a few months for the 1010 charge to appear.

1010 is how you can access an alternate long distance carrier. For instance, to place a call over ATT, you can dial 1010-288-1-234-567-8901 even if ATT is not your regular long distance carrier.

1)do you have centrex lines by any chance
2)If you are not using remote notification disable the voicemail ports from outdailing
3)wouldn't hurt to hang a a laptop or dumb terminal off the serial port
and capture some smdr from the KX-T/TD
and big brother the system for a while !
It could be an inside job slt may be forwarded to an overseas number and they bang thru the voicemail
by #8 XXX

connect to TD if its a TD and look at the fwd feature closely ...there is a 1/2 dozen ways to hack

I ran all the TVA-200 reports, and couldn't find
a single out-of-place setting. No new boxes were
added ( since the initial install a few years ago!)
and no suspicious change activity, or telephone
numbers..

But then I called the custom service ( which answers the phone after hours ) and discovered that by pressing #9 - I was connected to Verizon - to a line that offers collect and calling card calls!

Where is this setting? I searched through all 4
manuals and couldn't find it - There is a #N
command for each digit - have seen it somewhere
but can't remember where.

Thanks again..

Good security codes on all boxes, especially Admin.
Disable International calls on VM ports and all phone ports unless you do that a lot. You can over ride any Toll Restriction, Either Domestic or international on a per call basis.
If the TVA is on your network, check the ports in the router. Is there a modem in the TVA or the TD1232???
Notifications go through the VM, as long as those ports are restricted as you want it's ok.
Remote call fwd is set by the VM but done by the phone extension, again, if it's restricted, no prob. There are a lot of variables.

look at your custom service definitions #9 whilst connected to vm should be a hang up followed by "thank you for calling "

when you have the vm connected to the computer go into the utilities section and use the " putd " command then make your call again , this will show you what the vm is doing on a step by step basis

I missed that "putd" command on my TVA, but it does have a tab that lets me monitor system activity :-)

Carl

Thanks to all for the suggestions.

TVA is not on the net, does have a modem ( which
I use ). TD1232 does not have a modem.

kxtvet: I found the #9 command - it's a voicemail
service command - apparently hard-wired -
you are right, it's supposed to hang up the system,
but it does not - in fact #3,#4,#5,#7 and #9
all call a Verizon number ( as I said ), which
prompts for an operator-assisted call - could
someone use a 1010 code that way?

Anyway, I don't know where to go to change
those hard-wired settings. I can change
the way # works in the Custom service, but
the # commands also work inside a voicemail
box...

Also - How do you disable VM ports from outdialing?

Butch - you mention a feature to allow a
traveling employee to call in & out. What is
that called? So I can disable it...

Thanks again...