SimJacker

https://simjacker.com

AdaptiveMobile Security provides the industry’s most comprehensive mobile threat defence and intelligence capabilities

SIMjacker

A SIM card flaw, discovered being actively exploited in the wild, which allows attackers to hijack any phone just by sending it an SMS message..

Overview

AdaptiveMobile Security have uncovered a new and previously undetected vulnerability andassociated exploits, called Simjacker. This vulnerability is currently being actively exploited bya specific private company that works with governments to monitor individuals.“Simjacker” and its associated exploits is a huge jump in complexity and sophisticationcompared to attacks previously seen over mobile core networks. The main Simjacker attackinvolves an SMS containing a specific type of spyware-like code being sent to a mobile phone,which then instructs the SIM Card within the phone to ‘take over’ the mobile phone to retrieveand perform sensitive commands. The location information of thousands of devices wasobtained over time without the knowledge or consent of the targeted mobile phone users.During the attack, the user is completely unaware that they received the attack, thatinformation was retrieved, and that it was successfully exfiltrated. However the Simjackerattack can, and has been extended further to perform additional types of attacks.Simjacker has been further exploited to perform many other types of attacks againstindividuals and mobile operators such as fraud, scam calls, information leakage, denial ofservice and espionage. AdaptiveMobile Security Threat Intelligence analysts observed thehackers vary their attacks, testing many of these further exploits. In theory, all makes andmodels of mobile phone are open to attack as the vulnerability is linked to a technologyembedded on SIM cards. The Simjacker vulnerability could extend to over 1 billion mobilephone users globally, potentially impacting countries in the Americas, West Africa, Europe,Middle East and indeed any region of the world where this SIM card technology is in use.We are quite confident that this exploit has been developed by a specific private company thatworks with governments to monitor individuals. AdaptiveMobile Security has been workingclosely with their customers and the wider industry; including both mobile network operatorsand SIM card manufacturers to protect mobile phone subscribers. We have blocked attacksand are committed to using our global threat intelligence to build defences against these newsophisticated attacks that are circumventing current security measures.

How it Works

https://www.adaptivemobile.com/blog/simjacker-next-generation-spying-over-mobile

https://www.adaptivemobile.com/blog/simjacker-frequently-asked-questions