INGATE

From The Sip Trunking Experts

TMCNet:  IT worker outsourced own job - then relaxed: US programmer surfed net as work was done in China Scam cost culprit less than a fifth of his salary

[January 16, 2013]

IT worker outsourced own job - then relaxed: US programmer surfed net as work was done in China Scam cost culprit less than a fifth of his salary

(Guardian (UK) Via Acquire Media NewsEdge) When a routine security check by a US-based company showed someone was repeatedly logging on to their computer system from China, it naturally sent alarm bells ringing. Hackers were suspected and telecoms experts were called in.


It was only after a thorough investigation that it was revealed that the culprit was not a hacker, but "Bob" (not his real name), an "inoffensive and quiet" family man and the company's top-performing programmer, who could be seen toiling at his desk day after day and staring diligently at his monitor.

For Bob had come up with the idea of outsourcing his own job - to China. So, while a Chinese consulting firm got on with the job he was paid to do, on less than one-fifth of his salary, he whiled away his working day surfing Reddit, eBay and Facebook.

The extraordinary story has been revealed by Andrew Valentine, senior investigator at US telecoms firm Verizon Business, on its website, securityblog.verizonbusiness.com.

Verizon's risk team was called by the unnamed critical infrastructure company last year, "asking for our help in understanding some anomalous activity that they were witnessing in their VPN logs", wrote Valentine.

The company had begun to allow its software developers to occasionally work from home and so had set up "a fairly standard VPN [virtual private network] concentrator" to facilitate remote access. When its IT security department started actively monitoring logs being generated at the VPN, "What they found startled and surprised them: an open and active VPN connection from Shenyang, China! As in, this connection was live when they discovered it," wrote Valentine.

What was more, the developer whose credentials were being used was sitting at his desk in the office.

"Plainly stated, the VPN logs showed him logged in from China, yet the employee is right there, sitting at his desk, staring into his monitor." Verizon's investigators discovered "almost daily connections from Shenyang, and occasionally these connections spanned the entire workday".

The employee, whom Valentine calls Bob, was in his mid-40s, a "family man, inoffensive and quiet. Someone you wouldn't look twice at in an elevator." But an examination of his workstation revealed hundreds of pdf invoices from a third party contractor/developer in Shenyang.

"As it turns out, Bob had simply outsourced his own job to a Chinese consulting firm. Bob spent less than one-fifth of his six-figure salary for a Chinese firm to do his job for him." When the company checked his web-browsing history, a typical "work day" for Bob was: 9am, arrive and surf Reddit for a couple of hours, watch cat videos; 11.30am, take lunch; 1pm, eBay; 2pm-ish, Facebook updates, LinkedIn; 4.40pm-end of day, update email to management; 5pm, go home.

The evidence, said Valentine, even suggested he had the same scam going across multiple companies in the area.

"Quarter after quarter, his performance review noted him as the best developer in the building," wrote Valentine.

Bob no longer works for the company.

(c) 2013 Guardian Newspapers Limited.

[ Back To SIP Trunking Home's Homepage ]

Loading
Subscribe here for your FREE
SIP TRUNKING enewslettter.

Featured Partner


Featured Whitepapers

SIP Security for the Enterprise
Voice over IP (VoIP) is incorporated into a variety of computer networks, both public and private, and used for everyday transactions and communications among carriers, businesses, government agencies...

Making A Broadband Purchase Decision
Businesses today have many options for broadband connectivity. Clarifying your particular business needs prior to selecting a broadband provider will ensure an optimal match of broadband service to your requirements.

Voice-Optimized Network Delivers Premier Call Experience
Customers equate call quality with business quality. Real-time communication, interpersonal interaction, and the cordial tone of a call center representative can create a positive impression of your business that no email can match.

Featured Case Studies

Business Telecom Expenses Reduced 50%
A small to medium sized company in the midwest was interested in migrating to IP Communications, but in today's economy, they were hesitant to upgrade their communication system due to their perception that the cost would outweigh the benefits.

Multi-State Company Cuts Telecom Costs 50%
A multi-site, multi-state company with extensive monthly long distance fees and toll-free charges did not have adequate broadband for Broadvox SIP Trunking requirements, nor did they have a SIP enabled telephone system.

Discover Leisure Connects Remote Users to its IP-PBX
Discover Leisure is one of the largest resellers of caravans and motor homes in the UK. With 15 branch of?ces all over the country, the company spent a great deal of money every month just on internal phone calls.

Featured eBOOKS

Internet+: The Way Toward Global Unified Communication
Connecting the telephony of the enterprise PBX or Unified Communications (UC) system using SIP trunks instead of conventional telephone lines has been very successful in recent years.

What is SIP Trunking? Edition 2
SIP trunking is becoming more of a focus for service providers. One key issue many service providers face when deploying SIP trunks is NAT, or Network Address Translation, traversal.

What is SIP Trunking? Edition 1
A vast resource for information about all things SIP - including SIP, security, VoIP, SIP trunking and Unified Communications.

Featured Videos

Broadvox VAR Testimonial VAR 1:
Part 1 of the VAR (Value Added Reseller) Partner Program Testimonials for Broadvox...

E-SBCs AS The Demarcation Point:
Ingate's Steve Johnson talks to Erik Linask about the role session border controller plays as the demarcation point at...

Demystifying DPI
How can deep packet inspection protect your SIP traffic as well as your entire network?

Featured Resources

Partner Program Overview:
Over 4,000 VARs, Master Agents, Solution Providers, and Independent IT Professionals trust Broadvox. We offer customized services and solutions to fit seamlessly into any company's business model. And when you partner with Broadvox, every member of our team stands behind you and your customers 100%...

SIP Trunk UC Summit

What's New

Presenting the New Ingate/Intertex Website:
Internet+ is an extended Internet access allowing high quality SIP (Session Initiation Protocol) based real-time person-to-person communication, everywhere and for any application. It applies to both fixed and mobile networks ...

Featured Blogs

Featured Webinars

Secure SIP Trunking:
What You Need to Know

Successfully Deploying Enterprise SIP Trunking:
Tools and Techniques for Overcoming Common Roadblocks

Featured Podcasts

Getting the Most Out of Your SIP Trunks:
Ingate's Steve Johnson and TMC's Erik Linask discuss how best practices forgetting the most out of SIP Trunking services and common pitfalls to avoid.

Featured Datasheets

Ingate SIParator E-SBCs
Adopting SIP is a simple process with the Ingate SIParator, the secure enterprise session border controller (E-SBC). The SIParator makes secure SIP communications - including VoIP,SIP trunking and more - possible while working seamlessly with your existing network firewall.

Ingate Firewalls
Everyone is talking about enterprise usage of VoIP, instant messaging and other types of realtime communications including presence and conferencing.

SIP Trunk Solutions for Service Providers
The award-winning Ingate Firewall and Ingate SIParator deliver a high quality, reliable SIP trunk connection between the customer's IP-PBX and the service provider network, and solve interoperability issues to simplify deployments and support for remote diagnosis of reported issues.