Skip to main content

Questions tagged [simcard]

A subscriber identity module, or SIM card, is a circuit used to store the IMSI number and associated key used as authentication on mobile telephony devices (for example mobile phones and tablets).

Filter by
Sorted by
Tagged with
5 votes
2 answers
862 views

Can SIM card be locked to the specific equipment?

I'm curious if SIM card can be "personalized" to operate only in the specified mobile equipment in addition to usual PIN security. So the SIM extracted from "legitimate" phone and placed into ...
1 vote
1 answer
353 views

What is the most secure internet access option for Android phones?

My goal is to make one of my android phones as secure as possible, hence the question: What is the most secure way for an Android phone to gain internet access? Options I (think I) have: The phone ...
5 votes
1 answer
2k views

Can WhatsApp, Signal or Telegram be hacked through a SIM SWAP attack?

In Cuba the telecoms/ISP monopoly, Etecsa, works with the political police to spy on dissidents, journalists and others. A common attack in Cuba is therefore SIM Swapping which is easy for them. It is ...
7 votes
0 answers
5k views

Are there any security benefits to enabling the PIN on an eSIM?

For physical SIMs, I'm aware of a number of security benefits to enabling the SIM PIN, because for an attacker with access to a lost or stolen SIM, a PIN prevents transferring the SIM to a different ...
23 votes
3 answers
3k views

Does the telecom provider need physical access to the SIM card to clone it?

In many dictatorships SIM card cloning is used by the police (working together with the telco) to spy on dissidents, journalists etc. Some people say that you need the authentication key on ...
1 vote
1 answer
221 views

How to prevent hackers from using my phone number to make accounts?

It seems a hacker is using my phone number to make fraudulent account, and I would like to prevent that. Usually, if a person has your phone number, they're not able to make an account because a ...
0 votes
1 answer
2k views

Can an employer track phone activity without a company SIM and without MDM?

Been looking for a phone upgrade and my dad has an iPhone (iPhone 13) given to him by his work, which he doesn’t use anymore. He offered to let me use it on the condition that the company can’t see ...
0 votes
1 answer
480 views

Can a simcard's public IP be accessed?

I am in a discussion with someone about IoT devices. We use private IPs for simcards, but the other organisation is using public IPs. I think it is possible for a hacker to access these public IPs to ...
2 votes
0 answers
99 views

Why did attackers try to change billing address in a SIM swap attack?

Recently, we saw a spat of sim swap attacks against some of our users in my organization. It was a unusually high number of "number transfer" requests being sent out by a mobile carrier. ...
1 vote
0 answers
305 views

What equipment would an attacker need to infect a SIM card?

I'm aware that SIM cards can store malware according to this question but what equipment would be needed to do such an attack? For example, would you need a Computer and a SIM card reader or could it ...
0 votes
0 answers
150 views

Would removing a SIM disable the phone number and block text scams

I have a PAYG basic Nokia mobile, not a smartphone, and have noticed on my EE A/c there is a transaction for a Text Service with a charge of 15p, appearing every so often, which is nothing to do with ...
-1 votes
1 answer
236 views

Is a 2fa app really better than SMS 2fa with sim-pin?

A sim-pin safeguards against sim-swapping, which is the primary advantage of using an authenticator app instead of SMS, is this not so?
2 votes
0 answers
90 views

What are the pitfalls of adding a corporate eSIM to an unmanaged employee device in lieu of land-line phones?

Instead of having a landline at each employee's desk, allow them to add an eSIM to a compatible personal cell phone. (If possible, disable SMS for the added eSIM so it is acting as a replacement for ...
2 votes
0 answers
151 views

How much of a security threat to the PC is a SIM card running applets when plugged into a USB modem?

Background A customer complained to a mobile phone company that they were receiving messages that were leaving the screen turned on until it was noticed by the customer (usually many hours) by which ...
0 votes
0 answers
222 views

How can you spoof you caller id but not using a voip (your carrier instead)?

My research: I found this security stackexchange post but it didn't answer my question. I know that you can do similar things using astresik with voip provider. I came up on o blog that explain that ...
2 votes
1 answer
14k views

What happens if incorrect SIM card PUK entered 10 times?

I know that if incorrect SIM card PIN is entered three times, it is erased, so there is no longer any valid PIN, but user can set up new PIN with PUK. But when incorrect PUK is entered 10 times, it is ...
1 vote
1 answer
241 views

Avoiding carrying my main SIM card

In many countries, for example, Russia where I live, you need to show an ID to obtain a SIM card. Often this is used by law enforcement to track people. Sometimes corrupt officers sell people's ...
8 votes
3 answers
4k views

Are SIM proactive commands secure?

A SIM card can initiate some communication with a mobile device with so called "proactive commands" (chapter 6 of http://www.etsi.org/deliver/etsi_gts/11/1114/05.04.00_60/gsmts_1114v050400p.pdf). ...
2 votes
2 answers
3k views

Will Google Authenticator stop a sim-swap attack from compromising my Coinbase?

If I use Google Authenticator for Coinbase, and someone sim-swaps my phone number and gains full access to my email account, can they drain my Coinbase account? They would be in control of my email, ...
3 votes
2 answers
2k views

Can you connect to a mobile network without a SIM?

I know during emergency calls we can connect to our mobile networks without using a SIM and make calls. So it's technically possible to connect. The SIM card holds encrypted info on how to ...
35 votes
6 answers
6k views

How to protect against SIM swap scammers?

SIM swap occurs where the scammer uses phished information about you to request a SIM card replacement from your cell phone carrier, by tricking them into believing that it is you who is making the ...
0 votes
2 answers
223 views

What makes this cellphone (and the weird instructions) so privacy-friendly?

I stumbled upon this weird product in a webstore primarily selling Cannabis-related products (not the actual herbs): https://smoketower.com/nyheter/Anonym-3310-mobiltelefon I've manually translated ...
1 vote
0 answers
311 views

Can I determine whether my phone probes base transmission station (BTS) without a SIM card?

This question is related to another inquiry on this site: Can Android phone running without SIM card be tracked (localized) by police? Accepted answer claims that: Without a SIM, your cell phone ...
1 vote
0 answers
782 views

Should I occasionally replace my SIM card for security reasons?

To be able to use mobile data (e.g. 4G/ LTE) and mobile telephony (e.g. VoLTE) services on my smartphone, I need to put a SIM card into my smartphone (I know embedded-SIM/ eSIM exists but let's ignore ...
0 votes
1 answer
210 views

Is hacking email with simjacking a concern if you don't have 2FA for the email?

I've been doing some reading on simjacking lately, mainly around how one may be compromised. One common tidbit I read is that you can access your email and your other financial services if you have ...
3 votes
2 answers
806 views

Does replacing the SIM card mitigate any threats after a serious data breach?

I recently heard that a telephone company (a mobile network operator) was hacked and lots of data was stolen, maybe affecting up to a million customers. It sounds like the leaked data is already ...
17 votes
3 answers
4k views

Real life examples of malware propagated by SIM cards?

The laptops in use at my company have SIM card slots, which are actually used by some of our users. I am threat modeling our devices, so I was wondering if there are any realistic exploits that can be ...
2 votes
1 answer
382 views

How is SIM blocking enforced?

The only protection features that mobile phones have to keep thieves that stole a target's device from impersonating that subscriber is the PIN/PUK system that's on by default on most SIM cards. The ...
1 vote
1 answer
226 views

Massive operational security hole

Everything is based on phones now. If I have someone's phone I can reset their Salesforce password, access any SAS services etc. Assume this Hacker finds someone's phone number Hacker buys (or works ...
0 votes
0 answers
42 views

What harm can a leaked IMSI do? [duplicate]

I know that subscribers can be tracked using IMSI. I also know IMSI follows a pattern of MCC+MNC+MSIN where MCC and MNC parts remain static for a certain PLMN. What changes is the MSIN part. As such, ...
6 votes
1 answer
331 views

I have a conceptual idea for a network that could obfuscate the geolocation of a mobile station. I would appreciate short, critical feedback

I am a student in network engineering, and I have a technical essay due on November 18th. I can choose the topic of the essay myself. I have a conceptual idea of a network that could help obfuscate ...
0 votes
0 answers
146 views

How can you check if a phone number was recently moved? (To mitigate SIM swapping)

I know never to use phone number as a sole or backup authentication factor. But if a customer forgets their password, and I want to use information they know about their account alongside access to ...
2 votes
3 answers
1k views

My SIM card was stolen. What info besides contacts does it store?

And can they break the PIN number easily?
1 vote
1 answer
462 views

Does a SIM card still require a PIN even after being deactivated by the SIM-providing company?

For example, if I lost my SIM card (and stopped using it for years), and someone found it years later (after being deactivated by the SIM providing company due to extended nonuse), would the person ...
-1 votes
1 answer
166 views

Are the locations text messages are sent from logged?

When you send a text message from a phone with a sim card, is there a log which records your location at the moment, or any other information? is it linked to the phone? to the sim card? to both?
1 vote
0 answers
186 views

How I rescue my Android from a trojan and how did I get it? [closed]

I received a message with the famous link My-love co via Whatsapp and I never clicked on the link; I blocked the contact and deleted the message containing it; such a link was reported as infected by ...
12 votes
1 answer
9k views

esim vs sim card, what is more secure?

I can read many different attack vectors like swapping and porting but not sure if all those attacks are relevant about eSIM, can you please explain what are a security risk and attack vectors that ...
4 votes
3 answers
6k views

Is it safe returning or giving away a sim card you already used?

I bought a prepaid sim card and used it on my android, but i had a problem using it and would like to return it. Is it safe to do so? I'm wondering if it could now contain my personal information ...
1 vote
0 answers
514 views

Sniff the traffic of sim card [closed]

I wonder if Sim Card traffic can be sniffed? I mean only the internet connection when it makes to requests to several websites. Sniff those traffic by WireShark maybe? P.S: not messages, only network ...
1 vote
1 answer
278 views

How to prevent sim swap to the most extent possible

There's a technique called sim swap, which enables a fraudster to transfer the victim phone number to an other sim, allowing a fraudster hence to read the messages but especially to empty out their ...
1 vote
3 answers
20k views

Can an unregistered phone with a prepaid SIM card be traced by the police? [closed]

Let's say that someone is using an unregistered phone — I mean just a phone that he bought in another country — with a prepaid SIM card. The person is sending messages only on WhatsApp, without making ...
2 votes
1 answer
2k views

Is a USB dongle with an active 3/4G data SIM trackable?

Let's say I buy a second-hand USB dongle and put in a pre-paid and unregistered data SIM card. At the time of the purchase of both items, my face was covered, I paid cash and I live 500 miles from the ...
1 vote
2 answers
9k views

Is it possible to track a SIM card even if the cell phone is turned off?

I'm wondering if it is technically possible to track a SIM card inserted in a cell phone with sufficiently charge in the battery.
5 votes
1 answer
24k views

If my Android phone has a virus, can I change its SIM into a new phone to get a clean start, or can the SIM carry over the virus?

I am considering switching my SIM card into a spare Android phone I have, in light of two issues: 1) My issue here: Suspicious text received from my # but I did not send it - is there definitely a ...
9 votes
1 answer
2k views

simjacker: which SIMs are vulnerable?

simjacker.com looks like a pretty serious security issue with SIM cards. There's not much technical detail on their website though. And it'd be nice to be able to already know which SIMs are ...
1 vote
0 answers
205 views

SimJacking protection [closed]

How do you protect your mobile phones from SimJacking?
1 vote
0 answers
495 views

How do third party providers remove the SIM lock on a mobile phone?

There are third party providers online who offer to remove the SIM lock on mobile phones, by emailing the unlock code. All they ask for is the phone's IMEI and the network provider's name. In one ...
0 votes
1 answer
371 views

SIM cards - Keeping my phone calls secret

I'm traveling in Canada and I don't want to use my company phone for private calls. I am also interested in minimizing costs but I am more concerned about relative anonymity. So I bought a SIM card ...
3 votes
1 answer
1k views

Can websites uniquely identify users by the sim card used to access the website?

If I was to use a phone's data connection to access a website, and then pop that sim card into another phone to access the same website, could the website tell that I am the same user?
1 vote
0 answers
476 views

Can mobile service providers use my iPhone's microphone to listen even when I'm not on a call?

So is this technically possible? Basically can the service provider somehow hack into my phone and use the microphone to hear the surrounding of my phone if they somehow have a backdoor/malicious code ...