INJ3CTOR3 Operation – Leveraging Asterisk Servers for Monetization

From malware.news

Figure 1: Inj3ct0r’s attack flow.

Recently, Check Point Research encountered a series of worldwide attacks relevant to VoIP, specifically to Session initiation Protocol (SIP) servers. Based on information provided by our global sensors, there appears to be a systematic exploitation pattern of SIP servers from different manufactures. Further exploration revealed that this is part of a large, profitable business model run by hackers.

Read more…