Off-path VoIP Interception Attacks

AutorDai, Tianxiang; Shulman, Haya; Waidner, Michael
ArtConference Paper
AbstraktThe proliferation of Voice-over-IP (VoIP) technologies make them a lucrative target of attacks. While many attack vectors have been uncovered, one critical vector has not yet received attention: hijacking telephony via DNS cache poisoning. We demonstrate practical VoIP hijack attacks by manipulating DNS responses with a weak off-path attacker. We evaluate our attacks against popular telephony VoIP systems in the Internet and provide a live demo of the attack against Extensible Messaging and Presence Protocol at
KonferenzInternational Conference on Distributed Computing Systems (ICDCS) 2021