Telkom has warned dial-up Internet users of a virus that hijacks modems and dials international premium-rated numbers without the user being aware of it.
According to Telkom, the virus is a small executable file that downloads itself onto the user`s PC and then automatically dials international destinations such as Western Samoa or the Solomon Islands, with the calls charged at exorbitant rates.
Telkom media specialist, Roshelle Pillay, says the virus is programmed to mute the modem dial sound and although in some instances customers are warned that an international number will be dialled, in most cases they are simply disconnected from the Internet service provider (ISP) and the international numbers dialled.
"Customers who download software, or click onto pages can unknowingly be rerouted to international operators and thus incur costs," says Pillay.
"In some cases the Web-dialler also has the capability of allowing the user direct access to the international pay-site without having to connect to the local ISP. In such cases, the international number will reflect on the customer`s call detail report with no preceding call to the local ISP."
She says customers using the Internet should always read the terms and conditions of Web sites before accessing information, as Telkom deals with a request from a customer - via an operator or ISP - to connect to an international destination almost instantaneously and cannot be responsible for verifying all international calls.
Ryan Price, executive director at IT security company ISA, says such a virus does exist, but security vendors don`t consider it a major threat at present.
"Security vendors rate viruses in terms of danger levels, and the 'hijacker` virus is currently rated at level three, which means we are not too worried about it at present and there are fixes available for it," he says.
"Obviously it could be expensive for someone who does not have virus protection, as you could get quite a shock when receiving your telephone bill at the end of the month, but as far as we`re concerned, it isn`t really on the radar screen."
Pillay says Telkom recommends its BlockCall Plus product, available for R34.85 a month, which is activated by a secret PIN and can be programmed to block all calls to international destinations.
She says the PIN-holder can still 'allow` the calls they want to be made, while preventing any nasty surprises on their bill at the end of the month.
Related stories:
ISA 2004 secures WWF network
Symantec warns computer users against new high risk vulnerabilities
Y3K makes two acquisitions
Linux gets anti-virus
Share
