Simjacker vulnerability actively exploited to track, spy on mobile phone owners

Minimalist · Sep 12, 2019

Following extensive research, AdaptiveMobile Security has uncovered a new and previously undetected vulnerability. This vulnerability is currently being exploited and is being used for targeted surveillance of mobile phone users.
Click to expand...

https://www.helpnetsecurity.com/2019/09/12/simjacker/

guest · Sep 18, 2019

Doubts raised over Simjacker security flaw
September 18, 2019
https://www.computing.co.uk/ctg/news/3081654/simjacker-security-flaw-doubts

While AdaptiveMobile Security research team is confident about their study, many security experts are sceptical about the big claims made by the AdaptiveMobile.

"I've been researching the SimJack issue and the more I am, the more something smells fishy about it...," said cyber security expert, Dr Vesselin Bontchev, known as @VessOnSecurity on Twitter.
He believes the researchers at AdaptiveMobile have overstated the number of victims at risk due to Simjacker vulnerability.

"Claim that a billion people are affected. How do we know that? Oh, it's because the mobile operators of 30 countries with that many people total are using AdapiveMobile's software. Really? Who had heard of them before? All I see is a single source of the claim - AdaptiveMobile," Bontchev added.
The cyber security expert also complains that AdaptiveMobile have provided no technical details, so far, about the vulnerability.

"Zero technical details, besides one meaningless diagram that could mean anything. Yes, I've read the S@T specifications and commands. "Malware sent by SMS"? Gimme a break."
Click to expand...

guest · Sep 29, 2019

Researchers Think They Know How Many Phones Are Vulnerable to 'SIMjacker' Attacks
They also created a tool to determine whether your phone's SIM card is vulnerable
September 27, 2019
https://www.vice.com/en_us/article/...ny-phones-are-vulnerable-to-simjacker-attacks

Now, a second group of researchers have detailed how prevalent SIM cards vulnerable to the attack may be, and a tool allows the public to check if their SIM card may be exposed to such hacks.

Although the percentage of SIM cards that are vulnerable to the attack is relatively low when compared to the total in circulation, the research provides new information around a novel attack being used in the wild.

"We wanted to understand the extent to which users need to worry about SIMjacker and create ways to know whether your SIM is vulnerable or even under attack," security researchers Luca Melette and Karsten Nohl from cybersecurity firm SRLabs wrote in a blog post detailing the research.
SRLabs tested 800 different SIM cards, the write-up says. These SIM cards came from 86 different countries, according to a spreadsheet of the researched countries shared with Motherboard by Melette.
Click to expand...

SRLabs: New SIM attacks de-mystified, protection tools now available

guest · Oct 11, 2019

These are the 29 countries vulnerable to Simjacker attacks
October 11, 2019
https://www.zdnet.com/article/these-are-the-29-countries-vulnerable-to-simjacker-attacks/

Adaptive Mobile -- the cyber-security company that discovered the Simjacker attack -- published today a list of countries where local mobile operators ship SIM cards vulnerable to Simjacker.
The list includes 29 countries across five continents, albeit Adaptive Mobile did not list which telco providers are vulnerable in each: [...]
SIMJACKER ATTACKS SPOTTED IN MEXICO, COLOMBIA, AND PERU.
Now that the security conference has come and gone, the company kept its promise and provided more details about the Simjacker attacks it observed in the wild.

But besides listing all the countries where mobile operators have misconfigured SIM cards and have left the S@T Browser app open to attacks, Adaptive Mobile also revealed the countries where it detected attacks.
The cyber-security company also said it found evidence that Simjacker was developed by a company that sells surveillance software to governments across the world.

"We have not named the specific company that we believe is responsible, as to do so, we would need to release some additional proof," Adaptive Mobile said in a blog post published today. "That proof would also reveal specific methods and information that would impact our ability to protect subscribers."
Click to expand...

Despite Simjacker being a very scary attack, the company calls for calm.

"The 'average' person is not likely to be targeted," it said, "the main targets are probably those that are of interest to nation-state customers."
Click to expand...

Log in or Sign up

Simjacker vulnerability actively exploited to track, spy on mobile phone owners

Minimalist Registered Member

guest Guest

guest Guest

guest Guest

Log in or Sign up

Simjacker vulnerability actively exploited to track, spy on mobile phone owners

Minimalist Registered Member

guest Guest

guest Guest

guest Guest

Useful Searches