Caller-ID Spoofing

• Tools:

• • Most soft-phones
  • VoIP to PSTN service providers that honor user-supplied Caller-ID information
  • • http://www.iax.cc/
    • http://www.spoofcard.com/

• Mitigation:

• • Don’t honor user-supplied Caller-ID information
  • Don’t trust Caller-ID information for user authentication