The Sim jacker vulnerability

-

The Simjacker vulnerability could extend to over 1 billion mobile phone users globally.

As time passes, we’re witnessing more exploits building upon the usage of sim cards including the ever-famous sim swapping method. To add to these, just recently, AdaptiveMobile Security had released details of a previously undiscovered exploit dubbing it as SimJacking. How it apparently works is illustrated very simply with the help of a diagram below, however, there’s more to its intricacies.
Simjacker Vulnerability
Example of how Simjacker vulnerability can track mobile phone location of vulnerable subscribers – 

Comments

Post a Comment

Popular posts from this blog

-
Image
A new way for cybercriminals to create fake social media profiles and carry identity scams using Artificial Intelligence powered tool? A couple of months ago  it was reported that  NVIDIA has developed a tool that uses Artificial Intelligence to create extremely realistic human faces which in reality do not exist. Now, there is a website that is currently receiving a lot of attention online due to a similar function. Apparently, the website can recreate realistic fstent people by just hitting the Refresh button. Designed by a software engineer Philip Wang, who works at Uber, the website can generate fake but realistic looking human faces of people who don’t actually exist, using artificial intelligence. The website is hosted at  ThisPersonDoesNotExist.com . Wang used the research from NVIDIA’s algorithm StyleGAN to produce an infinite stream of fake portraits because the algorithm that he has used can generate a plethora of real images and use the generative ...
Read more

Attacking the Qualcomm's GPU

-
 - When writing an Android exploit, breaking out of the application sandbox is often a key step. There are a wide range of remote attacks that give you code execution with the privileges of an application (like the browser or a messaging application), but a sandbox escape is still required to gain full system access. This blog post focuses on an interesting attack surface that is accessible from the Android application sandbox: the graphics processing unit (GPU) hardware. We describe an unusual vulnerability in Qualcomm's Adreno GPU, and how it could be used to achieve kernel code execution from within the Android application sandbox. This research was built upon the work by Guang Gong (@oldfresher ), who reported CVE-2019-10567 in August 2019. One year later, in early August 2020, Guang Gong released an excellent whitepaper describing CVE-2019-10567, and some other vulnerabilities that allowed full system compromise by a remote attacker. However in June 2020, I noticed that the pa...
Read more

Major General Ori Gordin, commander of the Israeli army's Northern Command, reportedly killed in an Iranian rocket attack

-
Image
Major General Ori Gordin, head of Israel's Northern Command, was reportedly killed today in a rocket strike believed to have been carried out by Iran, according to unconfirmed Israeli sources. Gordin, a veteran commander responsible for defense along the borders with Lebanon and Syria, played a central role in recent operations in the north. According to some accounts, Gordin stated today that "the threats from Iran's proxies in the north will be met with an overwhelming Israeli force." Explosions struck a military post in the north shortly afterward. The area is cordoned off; the government remains silent, but media outlets are reporting Gordin's death. An escalation of the conflict between Israel and Iran is looming.
Read more