<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif; ">
<div>User mailbox was compromised. The attacker called into the extension and left a voicemail while spoofing the number they wanted to call, then called back, logged into the mailbox, retrieved the message, and used the "Callback Caller" option from the playback
menu to originate a call back to the spoofed number.</div>
<div><br>
</div>
<div>I disabled the option in the voice portal to mitigate further attacks. Figured it would be worth sharing.</div>
</body>
</html>