Questions tagged [sim-swapping]

Sim swapping is an account take over attack where the attacker takes over the victim's phone number and thereby receives e.g. multi factor authentication SMS:es.

Filter by
Sorted by
Tagged with
0 votes
0 answers

eSIM/eUICC relay attacks

I'm trying to understand how the eSIM is protected against cloning. Here is the diagram from GSMA standard: Now the ICT operator has its own security domain in which all the GSM related keys ...
  • 39
3 votes
2 answers

Is asking users to enrol in SMS 2FA when they already have an authenticator good security practise?

I already have an authenticator for Amazon AWS, and I'm being regularly asked to add an SMS 2FA as well. If I add SMS MFA, will I become vulnerable to sim-swapping attacks on that MFA? Same thing with ...
  • 1,132