Ok, First of all I do want to apologize for placing this in the Asterisk Support even though I’m running the Switchvox Free edition. But the because this section gets the most hits, and I’m in dire need of help.
Last week, We started getting calls from people who were getting calls from our number stating they need to activate their CC number, we sell trucks.
When I looked at the log, I saw constant calls outgoing from one of our extensions. I called my SIP provider (WHo is also our ISP provider, Cbeyond). They said it has absolutely nothing to do with them and our PBX has been compromised (even though I see no changes to it) and I could have swore they were giving us hardware Firewall.
Anyways, I deleted the extension that was making all the calls and the calls stopped. I looked all over our PBX and phones and it seems like no changes were apparent.
Today, it started again with a different extension (even though I changed all passwords for phones and PBX). I have disabled all outgoing calls on this such extension, now in the log, i see it keeps trying to dial random numbers but the calls are not going through.
Note it’s not making any new extensions, the log is seeing it as our current extensions are making all the calls. weird.
What the heck is going on???