3 ms·

> An advanced enough attacker can totally redirect your outbound calls How?

• londons_explore 5y ago
  The attacker rings your phone company up, impersonates you, and gets your phone line added to a company plan where all dialled phone numbers are first passed to a company phone system to allow the mobile phone to act like an internal phone - so for example you can dial "753" to ring the phone in room 753 of your company office. Calls will only go to the external phone network if the internal company one rejects them. Then the attacker can intercept any outgoing call.
  • Piskvorrr 5y ago
    Feasible. Far more work required, and the plan switch should trigger all sorts of red flags (and thus verifications) before you even place a single phone call.
  • ziml77 5y ago
    Is this even possible? An external number's calls getting routed around to the internal side of a PBX without explicitly dialing into the PBX?
    • bluGill 5y ago
      Possible, you need to convince the phone company, but it is done just often enough for real reasons that it is posisble