WIBattack – New SIM card attack disclosed, similar to Simjacker

guest · Sep 28, 2019

New SIM card attack disclosed, similar to Simjacker
September 26, 2019
https://www.zdnet.com/article/new-sim-card-attack-disclosed-similar-to-simjacker/

A team of security researchers has detailed a second SMS-based attack that can allow malicious actors to track users' devices by abusing little-known apps that are running on SIM cards.

Mainly, Simjacker runs commands against the S@T Browser app, while WIBattack sends commands to the Wireless Internet Browser (WIB) app.
Both are Java applets that mobile telcos install on SIM cards they provide to their customers. The purpose of these apps is to allow remote management for customer devices and their mobile subscriptions.
WIBATTACK
In a report released earlier this month, AdaptiveMobile said it discovered that a "private company that works with governments" was using rogue commands sent to S@T Browser apps running on SIM cards to track individuals.

In a report published last weekend, security researchers from Ginno Security Labs said that the WIB app was also vulnerable to similar attacks, although they were not aware of any attacks.
Click to expand...

Just like the Simjacker attack, Ginno Security Labs researchers say this attack vector can also be abused to track users. If used by a skilled attacker, they can allow a threat actor to track a victim's location or start phone calls and listen to nearby conversations.
Click to expand...

Log in or Sign up

WIBattack – New SIM card attack disclosed, similar to Simjacker

guest Guest

Log in or Sign up

WIBattack – New SIM card attack disclosed, similar to Simjacker

guest Guest

Useful Searches