1B Mobile Users Vulnerable to Ongoing ‘SimJacker’ Surveillance Attack

[silversurfer]

Content source

https://threatpost.com/1b-mobile-users-vulnerable-to-ongoing-simjacker-surveillance-attack/148277/

A vulnerability discovered in mobile SIM cards is being actively exploited to track phone owners’ locations, intercept calls and more – all merely by sending an SMS message to victims, researchers say.

Researchers on Thursday disclosed what they said is a widespread, ongoing exploit of a SIM card-based vulnerability, dubbed “SimJacker.” The glitch has been exploited for the past two years by “a specific private company that works with governments to monitor individuals,” and impacts several mobile operators – with the potential to impact over a billion mobile phone users globally, according to by researchers with AdaptiveMobile Security.

“Simjacker has been further exploited to perform many other types of attacks against individuals and mobile operators such as fraud, scam calls, information leakage, denial of service and espionage,” said researchers with AdaptiveMobile Security in a post breaking down the attack, released Thursday.

1B Mobile Users Vulnerable to Ongoing ‘SimJacker’ Surveillance Attack

More than one billion mobile users are at risk from a SIM card flaw being currently exploited by threat actors, researchers warn.

threatpost.com

 

[silversurfer]

Researchers Disclose Another SIM Card Attack Possibly Impacting Millions

Another variant of the Simjacker SIM card attack has been disclosed by researchers and it could impact millions of mobile phones.

www.securityweek.com

 

[[correlate]]

Remember the Simjacker vulnerability?

Earlier this month, we reported about a critical unpatched weakness in a wide range of SIM cards, which an unnamed surveillance company has actively been exploiting in the wild to remotely compromise targeted mobile phones just by sending a specially crafted SMS to their phone numbers.

More SIM Cards Vulnerable to Simjacker Attack Than Previously Disclosed

Just like S@T Browser enabled mobile SIMs, the WIB (Wireless Internet Browser) SIM toolkit is also vulnerable to Simjacker vulnerability, leaving hundreds of millions of mobile phones users to remote hackers.

thehackernews.com