Who’s in your conference call?
Electronic communications has made meeting up with others via conference calls and web conferencing quite convenient and very commonplace today. It is important, though, to be aware of the security concerns and vulnerabilities for all types of conference services.
During an inspection we performed at a financial services company we found that their brand new boardroom conferencing system had been left with “auto-answer” enabled. This allowed anyone to call in and listen to everything taking place in the room, not only from any phone extension on the property, but also from any outside phone line. A caller just needed to know the “DID” or direct inward dial number (which happened to be the room’s extension number with the common prefix).
That incident involved the hardware based conference system built into the corporate boardroom. More common, though, and used by all levels of employees, is conference calling using either a corporate conference number (conference bridge […]