Data Exfiltration

Are your network monitoring systems warching for data exfiltration over voip ? Probably not.

I saw a great demo of a exploited system using voip to call into a conference number and the hacker calling into the conference number and isuing commands to the hacked system. He even had the hacked system read back the contents of a text file from its drive and the commands were issued from a simple dumb cellphone.

scary stuff.