SIM JACKING

SIM JACKING 

 A new kind of hacking threat targeting SIM cards of smartphones is on the rise. Cybersecurity officials say there is still no method to detect this threat.

The attack called ‘Simjacker’, discovered by UK-based Adaptive Mobile Security (AMS), happens when a spyware code is sent to a mobile phone which then hacks the SIM card, and ‘takes over’ the mobile phone.

Explaining the vulnerability to Express, Global Cyber Security Forum’s chairman Sai Krishna said, “With this attack, anybody can get into anyone’s mobile, read messages, listen to the conversation and track real-time locations.”

Krishna added, “This attack happens, as there is a vulnerability in the SIM application Tool Kit (STK), which hackers exploit, by sending malicious code to it.

The problem becomes serious as STK software either comes embedded with the phone or from the telecom provider.”

Unlike Google Play or iStore apps over which a user has controls, the STK software comes pre-installed, and users do not have control over it.

“Both the manufacturers and the service providers need to ensure that this vulnerability is patched,” Krishna added.