Security
What we are seeing on customer networks, and the change to make this week. Critical items are also emailed to the technical contact on the account.
Attackers are scanning SIP endpoints and trying common extension passwords. Successful guesses are then used for international toll fraud.
What to do. Disable SIP registration from the open internet where you can, enforce long passwords, and turn on geo-restrictions in the Altaris portal. We can lock registration to your public IP.
Emails pretending to be Altaris billing ask administrators to “verify” the portal password on a lookalike domain.
What to do. Altaris will never ask for your password by email. Sign in only from the bookmarked portal, and turn on single sign-on if you are on an Enterprise plan.
Callers probe auto attendants for an outbound route, then place high-cost international calls from the main number.
What to do. Remove unrestricted outbound access from IVR and voicemail, and set international dialing to off unless a queue needs it. Alerts for unusual spend are on by default.
Several Yealink and Grandstream builds from 2023 have known issues that can drop encrypted calls or expose the web admin.
What to do. Accept the firmware update from the portal, or follow the matching guide in Manuals. Phones we provision ship on a current build.
Report
Email security@altariscommunications.com with the time, source address and a short description. The SOC acknowledges reports within one business hour.
Free number porting, white-glove onboarding and a 30-day money-back guarantee. Most teams are live the same day.
