As the world and South Africa close down another October Cybersecurity Awareness Month, PBX-over-GSM provider NoPBX says voice traffic interception remains a serious threat in a South African corporate world awash with Voice over Internet Protocol (VoIP) systems.

According to Anton Potgieter of the Cape-based tech start-up: "Every October, we are reminded to use more complex passwords and to be on the lookout for more sophisticated phishing attempts that could lead to some very expensive ransomware demands."

What the predictable malware, ransomware and DDOS-related hints and tips, however well-meaning, don't acknowledge is that hacks don't have to be elaborate for cybercriminals to effectively fleece their targets. All that is needed is a predictably rickety VoIP system.

With VoIP calling long ago overtaking the traditional way business phone calls are made and received in South Africa, it's a wonder more column centimetres aren't devoted each Cybersecurity Awareness Month to just how straightforward it is to tap into IP-based voice traffic.

Breaking into the audio stream data packets that travel across the internet to make up VoIP traffic is straightforward for any cyberattacker worthy of their errant reputation. "Once this traffic interception is achieved, the cybercriminal can use easily obtained software to convert those packets into phone conversations," explains Potgieter.

Because hackers can gain access to VoIP calls so easily and listen in as employees discuss all manner of sensitive business information, South African corporates should consider one of two approaches. The first is to regularly communicate to employees the importance of never discussing sensitive company details like staff information, financial details, account numbers, passwords and more over the company VoIP system.

"Identity theft and VoIP service theft, for example, are easily done once hackers have intercepted voice traffic and listened in for personal information," Potgieter says.

A more practical approach towards ensuring impenetrable cybersecurity over company PBX systems is to make the switch from IP-based to GSM-based switchboard systems. 

NoPBX, South Africa’s own locally-developed, hosted mobile PBX (mPBX) solution is unique because it connects switchboard calls over pure GSM voice, instead of using voice-over-data. Without even needing to install an app, the NoPBX system is inherently secure for all users.

This smartphone-based cloud PBX system uses local GSM networks to turn standard smartphones into business switchboards. The solution runs all of its calls over highly-secure GSM voice networks. GSM is the world's dominant digital cellular technology used by over 5 billion people in some 220 countries including South Africa.

“There’s been a worldwide boom in the number of employees working outside the office - in delivery, sales, service and related positions. All of these users can now be seamlessly and securely connected to their company NoPBX system through their existing cellphones, resulting in complete connectivity for the whole enterprise, throughout the entire business day, and with no threat of hacking,” concludes Potgieter.

Since launch, NoPBX has found particular favour amongst small and medium-sized businesses, up to around 100 users – the SME market – due to its easy and fast implementation, and real-time management.  NoPBX now boasts clients across all industries, from agriculture and technology to hospitality, events, doctors and lawyers. Adding peace of mind, there are no contracts involved, as the system runs on a pay as you go basis.