Avoiding Expensive 1900 and IDD Diallers

Among the current dangers of the Internet is one that rather than being a danger to your computer (like a virus or worm) is a danger instead to your wallet. Known as diallers they cause what is known as "Internet dumping" - the dropping of your normal Internet connection and dialling on another number. The expensive part is the new number is a 1900 premium rate one or an IDD international number. Call charges are high - they can be $5.95/minute and possibly more.

A dialler can install itself for continued use instead of your regular dial-up or it can be just a one-off dump and call.


Where do diallers come from?

The dialler is often inadvertently downloaded while visiting pornographic, gaming (gambling), "warez" (file sharing and software "crack") or illegal MP3 sites - what could be termed "dodgy" sites. It often comes in the form of a page asking the user to install software to allow access to a site or says it's a plug-in to view content on a page. In other words it's a trojan - malicious software masquerading as useful and harmless software. They can also attempt to download and auto-install when you visit a page if your browser isn't configured not to.


Reducing the risk - user behaviour

Aside from avoiding the types of sites that lead to diallers the best advice is to never install unsolicited downloads (when you are asked to accept download of a file without having clicked a link).

Be very cautious when a page asks to download a plug-in, although this can be quite valid for things such as Flash graphics. Instead of allowing the browser to download directly from the requesting site obtain the plug-in directly from the author's site or another trusted site. Ensure your browser's security settings do not allow automatic software installation.

An unsolicited download in Internet Explorer

Be wary when you've been redirected to another page, particularly if it then asks you to download something and especially when it prompts an unsolicited download.

Caution is always required, so don't just blindly click away. Close suspect windows by clicking the "X" in the window frame as you don't know what the "yes" or "no" button will actually do.

Is the "Click Here To Enter" really taking you to another page or are you actually giving permission to download or install something malicious? Hover your mouse over links or buttons and try to read where they lead.

Ask yourself "do I really need to view this content?" when asked to install a plug-in. If you're uncertain then don't do it!

Basically it's up to you to be careful and sensible.

A page redirection to a dialler site

Reducing the risk - telecommunications

Configure your modem to have the speaker on when dialling so you can hear it when it is dialling and also learn the "tune" made when dialling your normal connection. This isn't foolproof as the volume can be turned off by using the appropriate "modem string" when dialling, but at least gives you a chance.

Configure your normal dial-up to not automatically re-dial on a dropout so that if you hear it dialling during an Internet session it may be suspicious. Turn the modem off immediately or unplug the phone line if in doubt. This setting is recommended anyway to prevent multiple redialling if you exceed your time allocation or are having line trouble for instance.

Contact your phone company and block access to 1900 & IDD numbers except by password. This doesn't offer complete protection as the dialler can use a "bypass" prefix to dial through another phone company - e.g. you may use Telstra but the dialler can dial through Optus by using a prefix number.


Reducing the risk - software

Diallers aren't viruses or worms but fall into the broad category of malware - malicious software. As such your anti-virus software may detect it but not necessarily. It is better to regularly use software specifically designed for the task such as Ad-Aware and Spybot Search & Destroy. These programmes are highly recommended for routine use in keeping your system clear of assorted malware and adware software. Ensure you run and update them regularly. Please be aware they aren't perfect so treat them as back-up to careful and sensible behaviour.

Some other things that will help protect you from diallers - a broadband connection as you won't be using a dial-up modem. Use an operating system other than Windows as the diallers are all Windows based software. Use a browser other than Internet Explorer (or at least keep that properly patched & secure) as dialler download can take advantage of security deficiencies or poor configuration of IE.

Useful links to test your browser:
http://www.jasons-toolbox.com/BrowserSecurity/
http://bcheck.scanit.be/bcheck/
https://testzone.secunia.com/browser_checker/


If you have or suspect you have a dialler

Unplug the phone line and switch off your modem (as this could be costing $5.95/min).

Run Ad-Aware, Spybot Search & Destroy and your anti-virus software. If you don't have them installed obtain them from elsewhere - ask a friend to burn a CD. Do not use the affected computer. Note these aren't guaranteed to remove every dialler.

Obtain a phone bill to check if you've incurred unusual charges. This won't be definitive as the costs could have been incurred through a different phone company.

If you don't think you've removed it seek help.

If you do find yourself a victim with a large bill as the result of a dialler follow the advice given by the Telecommunications Industry Ombudsman - TIO. Contact the relevant phone company and if they refuse to cancel that part of the bill related to the dialler then contact the TIO. It may be embarrassing to admit you have a dialler given it probably came from a porn site and that is what others will think or you may feel stupid. The scammers probably rely on this so just remember you've been ripped off and stick to your guns.