Global Site Corporate information Notice Other notices September 29, 2014: [Caution] Please be careful about international call connections due to unauthorized access by a third party. Other notice September 29, 2014 [Caution] Please be careful about international call connection due to unauthorized access by a third party . Dear customers Thank you for using NTT Communications services. In recent years, there have been cases in which customers using PBXs, etc. are charged high international call charges that they do not remember calling. In particular, there is a tendency for offices to be damaged on Saturdays, Sundays, public holidays, consecutive holidays, and between midnight and early morning when the office is unmanned. The cause of this is that if there is a problem with the settings of the PBX installed by the customer, or if security measures are inadequate, a malicious third party gains unauthorized access and impersonates the customer to make an international call. It turns out that there is. Customers are requested to check the setting status of the PBX and IP phone compatible devices they are using and take sufficient security measures in advance to prevent unauthorized use by a third party. Please be careful. 1. Confirmed cases of unauthorized access It has been confirmed that international calls are made by unauthorized access using the following methods. By misusing PBX's DISA (Direct In Service Access) function * 1 , remote maintenance, transfer function, etc., it impersonates a customer and makes an international call illegally. When IP-PBX security measures are inadequate, they access IP-PBX via the Internet and impersonate customers to make international calls illegally. When the security measures of the IP phone connection device are insufficient, the ID and password for connection are illegally obtained, and the international call is illegally made by impersonating the customer. <Country / region example of destination> country code Country / region name 232 Sierra Leone 242 Congo 252 Somalia 370 Lithuania 371 ラトビア 373 モルドバ 381 セルビア 994 アゼルバイジャン 2.お客さま側で必要な対策 お客さまにおかれましては、ご利用中のPBXやIP電話接続機器等の設定状況をご確認のうえ、次のような十分なセキュリティ対策を講じていただき、第三者による不正利用が行われないようご注意ください。 ＜主な対策＞ IP-PBXソフトウェアを利用する場合は、最新のバージョンにアップデートするなどのセキュリティ対策を行う。 PBXなどの機器やソフトウェアの設定状況を確認し、不要に外部から接続ができる設定になっていないかを確認し、不要な接続環境は削除する。 「外部から接続する際のパスワード」および「各種設定や管理用のパスワード」について、第三者が推測しやすいパスワードや簡易なパスワードは設定せず、定期的にパスワードを変更する。 機器やソフトウェアのアクセスログを記録、保存するようにし、不審なアクセスの有無をチェックする。 利用しているPBXなど機器メーカ、保守ベンダ事業者などに相談する。 IP電話サービスをご利用で、国際電話を利用しない場合は、各IP電話サービスの「国際電話利用休止」の付加サービス(無料)の申し込みを行う。 IP電話サービス以外をご利用で、国際電話を利用しない場合は、国際電話不取扱受付センターに国際電話利用休止の申し込みを行う。 3.NTTコミュニケーションズの対策 NTTコミュニケーションズでは、お客さま保護を目的として次のような対策を講じています。 NTTコミュニケーションズの各IP電話サービスから、当該不正アクセスで用いられた特定の国/地域宛の発信を一時的に規制させていただくことがあります。 不正アクセスで用いられたお客さまの電話番号からの国際電話のご利用を一時的に規制させていただくことがあります。 平時と比べご利用料金が急激に高騰した場合に、ご利用状況についてお客さまに確認させていただくことがあります。 <国際電話の利用休止のお申込み> IP電話サービスの国際電話利用休止 「OCNドットフォン」の国際電話利用休止 ( http://www.ocn.ne.jp/voip/phone/option/index.html#option04 ) Suspension of international call use of "OCN dot phone office" ( http://www.ntt.com/phone-office/data/m1-suspend.html ) Suspension of international call use of "Arcstar IP Voice" You can set it yourself on the business portal. Suspension of use of international calls for services other than IP phones International call non-handling reception center Tel: 0120-210-364 (Weekdays 9: 00-17: 00 / Call charges are free) Fax: 0120-210-535 * The International Call Non-Handling Reception Center is jointly operated by three international call companies (NTT Com, KDDI, and SoftBank Telecom). (reference) Similar warnings are issued on the websites of the Japan Internet Providers Association (JAIPA) and the Telecommunications Carriers Association (TCA) regarding unauthorized access. ◆ Japan Internet Providers Association "Regarding unauthorized use of IP phones by third parties such as spoofing (Note)" ( http://www.jaipa.or.jp/topics/?p=600 ) ◆ General Incorporated Association Telecommunications Carriers Association "Regarding unauthorized use of IP phones by third parties such as spoofing (Note)" ( http://www.tca.or.jp/topics/2013/0806_641.html ) To the top of this page Notice news Information about breakdowns and disasters Other notices About RSS feed We deliver new information via RSS / RDF. Introduction of NTT Com initiatives NTT Communications http://www.ntt.com/ Global services Social media site Individual customers Internet connection Content service Smartphone app Telephone / international call support NTT Com Store (Mobile Store) Recommended campaign pick up Notice Corporate customer synthesis Service list / search Small and medium-sized SOHO customers Global services Case study Seminars / Events campaign Topics Customer support Sales partner customers Corporate information Company Profile Management information CSR (Corporate Social Responsibility) Employment information Public information Corporate public relations / advertising activities Notice site map Terms of use of the site Inquiries / FAQ Service list privacy policy Web accessibility policy