Questions tagged [ss7]

Signalling System No. 7 (SS7) is a set of telephony signaling protocols.

Filter by
Sorted by
Tagged with
10 votes
2 answers
1k views

Is SS7 a threat any more?

I'm reading about an SS7 issue: SS7 flaw allows hackers to spy on every conversation. It seems to me that any phone on the world can be intercepted so the hacker can listen to your phone call or read ...
Phương Nguyễn's user avatar
7 votes
2 answers
6k views

How SS7 attack first enter into SS7 network?

I've read the following article about SS7 attack: https://berlin.ccc.de/~tobias/31c3-ss7-locate-track-manipulate.pdf I have some questions about this kind of attack: Is SS7 attack can be done ...
ransh's user avatar
  • 525
7 votes
1 answer
570 views

Should 2FA over SMS be considered insecure in the wake of recent SS7 attacks?

Design flaws related to SS7 has been known to us for quite a while now but telcos have conveniently discarded the arguments saying that the risk is too low due to the significant investments required ...
hax's user avatar
  • 3,951
5 votes
1 answer
767 views

Do SS7-based attacks affect landlines?

I am aware of the risks of SS7 for mobile users. Attackers can get location information, send spoofed texts, cause DoS and intercept phone calls/texts. Do those risks still apply for landlines? There ...
André Borie's user avatar
  • 12.8k
4 votes
1 answer
700 views

SMS based 2FA intercepts

Reddit just revealed that they experienced a security breach as a result of an intercepted SMS based 2FA. Another post on SMS 2FA refers to flaw in the telecom’s ss7 protocol that was used to perform ...
Aaron's user avatar
  • 161
3 votes
1 answer
355 views

Does SMS flood cause denial of service even when "blocked"?

Imagine a SMS flood using a few phone numbers. The client blocks the phone numbers using the build in mechanism of the smart phone, and thus does not receive any notifications. Even though the user ...
Daniel Grover's user avatar
3 votes
0 answers
842 views

Can SS7 attacks intercept SMS sent to a Google Voice number?

Hackers are able to steal 2FA SMS messages by exploiting SS7. As far as my understanding goes, this means gaining access to the SS7 system and then broadcasting a message akin to "This number is ...
Mohamed Hafez's user avatar
2 votes
0 answers
291 views

Is SS7 attack traceable/detectable?

There is a lot of talk about SS7 attacks. Even if old article, but still interesting. But lets say, someone accessed my account which uses two-step authentication (SMS verification method) and I ...
balex's user avatar
  • 272
1 vote
0 answers
232 views

How difficult are SS7 hacks? [duplicate]

Out of band communication via SMS has recently been shunned due to SS7 hacks. How likely are these to become more prevalent? I saw this question: Should 2FA over SMS be considered insecure in the ...
Chri3's user avatar
  • 327
0 votes
0 answers
333 views

SS7 attack possibilities

I'm new to SS7 security and have been looking into SS7 hacks. What I was wondering was if there are other ways hackers can gain access to SS7 networks other than creating an app using the SS7 SDK ...
EskimoJones's user avatar
0 votes
1 answer
263 views

Does SS7 attack cause malicious apps to install on your phone?

After watching a video course about SS7 attacks and remote control flaws through WiFi adapters of smartphones, a question comes to my mind: If an adversary can intercept your SS7 traffic and relate it ...
takamichi's user avatar
0 votes
0 answers
194 views

Can an attacker intercept mobile traffic exploiting SS7 vulnerability?

Can an attacker intercept my mobile traffic exploiting the ss7 vulnerability even if encrypted?
BiosRootKit's user avatar