Smartphone hijacking vulnerability affects AT&T, 47 other carriers

Dermot7 · May 21, 2012

Computer scientists have identified a vulnerability in the network of AT&T and at least 47 other cellular carriers that allows attackers to surreptitiously hijack the Internet connections of smartphone users and inject malicious content into the traffic passing between them and trusted websites.
Click to expand...

http://arstechnica.com/security/2012/05/smartphone-hijacking-on-att-47-other-carriers/

jitte · May 23, 2012

It's a TCP sequence number inference attack but appears to require some user interaction:

They labeled the most potent of the attacks on-site TCP hijacking. It relies on a lightweight piece of malware that must first be installed on a victim's phone that has Internet access as its sole privilege.

*snip*

Still another variation of the attack doesn't rely on any malware at all. An off-site TCP injection/hijacking exploit, for instance, relies on a technique known as URL phishing, which lures a user to a malicious intermediate webpage before sending him to what appears to be a legitimate target website. When certain conditions are met, the attack can replace the content of the site with arbitrary traffic, or if the user is logged in to the targeted site, can inject JavaScript into the pages that steals authentication cookies or performs actions on behalf of the victim.
Click to expand...

I've never owned a cellphone, and don't plan on it, though I did get an offer from AT&T yesterday telling me I could get 2 Smartphones for free, as long as I signed up for a 2 year plan for each of them.

Noob · May 24, 2012

Smartphone are there just for the convenience IMO, as long as you don't do anything sensitive there, it can be really handy at times.

Log in or Sign up

Smartphone hijacking vulnerability affects AT&T, 47 other carriers

Dermot7 Registered Member

jitte Registered Member

Noob Registered Member

Log in or Sign up

Smartphone hijacking vulnerability affects AT&T, 47 other carriers

Dermot7 Registered Member

jitte Registered Member

Noob Registered Member

Useful Searches