Just found a great article on voipfraud.org/, which describes everything:
voipfraud.org/secure_asterisk.php