Questions tagged [sim-swapping]
Sim swapping is an account take over attack where the attacker takes over the victim's phone number and thereby receives e.g. multi factor authentication SMS:es.
2
questions
0
votes
0
answers
39
views
eSIM/eUICC relay attacks
I'm trying to understand how the eSIM is protected against cloning. Here is the diagram from GSMA standard:
Now the ICT operator has its own security domain in which all the GSM related keys ...
- 39
3
votes
2
answers
179
views
Is asking users to enrol in SMS 2FA when they already have an authenticator good security practise?
I already have an authenticator for Amazon AWS, and I'm being regularly asked to add an SMS 2FA as well.
If I add SMS MFA, will I become vulnerable to sim-swapping attacks on that MFA?
Same thing with ...
- 1,132