Nabilah Safira
TechInAfrica – Simjacker is an exploit found by AdaptiveMobile Security, previously undetected and a new kind of exploit by a private company that works with governments to monitor individuals, according to AdaptiveMobile Security.
The main attack involves an SMS containing a specific type of spyware-like code being sent to a mobile phone. This code instructs the SIM card on the phone to take over the mobile phone, retrieving and performing sensitive commands in the result.
“The location information of thousands of devices was obtained over time without the knowledge or consent of the targeted mobile phone users,” AdaptiveMobile Security said.
The attack left the user unaware of their compromised device, of its information retrieval and that it was infiltrated.
But these attacks can be avoided with the availability of local SIM cards. Local SIM cards are not vulnerable to Simjacker, and they can provide relief to users. MTN, who is aware of the issue stated that MTN South Africa’s SIMS are not at risk as the Security Level configuration targeted in the exploits is not used by the company, and that MTN is always keeping check of the situation with AdaptiveMobile security while continuing to engage with the GMSA and its SIM vendors to prevent any unwanted circumstances for its customers.
MTN said, “While our SIM configuration protects us from these exploits, we’re looking into safeguarding against unauthorized sources being able to terminate binary SMSs on our network which is the trigger for these exploits.”
Vodacom also said it is aware of this “particular issue and has conducted extensive tests after the report being published”.
“We are confident that our customers are protected from this exploit and continue to invest significantly in our cybersecurity program,” Vodacom told Mybroadband.
Source: Mybroadband.co.za
