sim-jacker update

[theapache64]

Website: https://simjacker.com 🌐
News : https://thehackernews.com/2019/09/simjacker-mobile-hacking.html 📰
Reddit : https://www.reddit.com/r/simjacking

What do you have ?

[Romulus968]

What do I have?

Your repository cause we're in the same kayak on Shit River with no paddle.

[Romulus968]

I think Cellebrite is likely the "surveillance vendor" that is mentioned in these articles based on their current capabilities.

What I know:

• The attacker sends an SMS with hidden instructions from the Sim App Toolkit

• Phone receives SMS, S@T Browser on the SIM recognizes the commands

• The attacks are completely silent. The victim never receives a message in their inbox.

• The attack targets the S@T Browser, meaning it doesn't matter what kind of device the user is on

• Attacks are accomplished via sending binary code

• We likely won't ever see official source code, but we are surrounded by very intelligent people and someone will replicate this attack in time.

[theapache64]

@Nic8895

We likely won't ever see official source code, but we are surrounded by very intelligent people and someone will replicate this attack in time.

I be waitin' fer that moment!! 🕐

Anyways, thanks fer yer update matey ☠️

[AadeshGurav]

Hey bro i am from know_where so i am able to access a network tower near my home which basically provides calling, sms services and GPRS Services so what i am asking is, can we add a backdoor to it accessing the whole area network as they use windows server edition pls reply I'll have my eyes on this thread

[bbaranoff]

hello got this from positive technologies Dear Bastien Baranoff,
 

Good news for Friday the 13th! We've decided to drop a webinar on mitigating the recently uncovered Simjacker vulnerability next Thursday, September 19. 

 

The Positive Technologies team has years of sustained experience with analyzing vulnerabilities of all kinds. Back in 2014, our experts published the report "4G Security: Hacking USB Modem and SIM Card via SMS," in which they stressed the possibility of precisely such attacks and how a hacker could perform them. Even better, our product has already been tested and proven to secure systems from the latest "Simjacker" attacks.

 

During the webinar, our experts will role-play the attack process, show the must-know details and specifics, and give recommendations on how to prevent your network from being hacked by Simjacker. 

[theapache64]

@Aadesh9985 What do you mean by "able to access a network tower" ? What kind of access do you have ? remote, physical or both ?

@bbaranoff That's some great news. I'd really love to watch the event. Do they have any plan on live streaming the event ?

[Romulus968]

hello got this from positive technologies Dear Bastien Baranoff,

Good news for Friday the 13th! We've decided to drop a webinar on mitigating the recently uncovered Simjacker vulnerability next Thursday, September 19.

The Positive Technologies team has years of sustained experience with analyzing vulnerabilities of all kinds. Back in 2014, our experts published the report "4G Security: Hacking USB Modem and SIM Card via SMS," in which they stressed the possibility of precisely such attacks and how a hacker could perform them. Even better, our product has already been tested and proven to secure systems from the latest "Simjacker" attacks.

During the webinar, our experts will role-play the attack process, show the must-know details and specifics, and give recommendations on how to prevent your network from being hacked by Simjacker.

I'm curious as to how they're going to go about mitigating threats to S@T w/o reissuing SIM cards or forcing carrier to block S@T commands OTA, which ain't gonna happen because S@T is used in part of the process of updating Android devices OTA.

[bbaranoff]

@theapache64 i was invited by mail i have a token but it is personnal maybe by subscribing to positive technologies you will have one

[theapache64]

@bbaranoff I searched for the event here, but they didn't officially listed it there. I've contacted them via twitter and currently waiting for their reply. I'll definitely update their response here.

[bbaranoff]

@theapache64 maybe try that contact@positive-tech.com

[bbaranoff]

@Aadesh9985 you mean that you have made imsi catcher? you want to know if you can access to shell with it i am asking the same...

[bbaranoff]

i don't know if there is personnal cookies here but i shared for the love of information you can subscribe at the webinar here https://hs-6022457.t.hubspotstarter-ij.net/e2t/c/*W5GtnHw3r9Mm1W8XbcgY991Qtx0/*W7wkqw764pWq0W8WPsJP22TKDT0/5/f18dQhb0Sq5w8YHrCHN8t4ZczHyjJqW8qC89C3LyBpnW3hHhbQ5zh-NRVnQ9Qq8-LqRQW4dPXKZ8--v1pW1Txv798Ywj4mW1VJSg2567DzRVsgYCn56Bsf7W2Rxf3B78Kc8kW12Q-yq2f-ZBxW5pfQN35mZ9RMW7qjTB97qp6PBW4bH_qw2N33B5W3_t0gL32Gf2QW4dy5FS1kXfytW1SdKWJ1m2kWgW8Xl1bl8W1M0pW4srmsj6gXBFnN67h1zcQC5z2VPC2cV7flNcHW3Lt9Y23PHktfN6SfbsHgBSSdW964sC736p5J1W6T0lCR994443W94wcjZ8q-t2KN39SYcH7YFBYW1rGnpT2CTTHvW25MxWJ4VT6xnW4pPWTW1kl7Z6W5C3gbQ4XzrhpW4Vmy433MNlQ7VgMCQG4rHfJ6W1rLXSD3l09HBVbV_H35v-xbHW5HFsGK8dZNd1W4Pw1Vk2sbPxnVqV10K3CdJqgW3VV9cn2-BbBHW3jNnjl7jTn9GW96L2lj31GHfxW124NqL1Hdx05W4H7Wmx4MqSD_W2j7NY64HxPjzW519knw85v0x3W723QBb71wShbTfK5B7X1nzn103

[theapache64]

@bbaranoff Thank you so much for the link. I appreciate that.

@bbaranoff Can I post the link in our reddit thread ?

[bbaranoff]

@theapache64 yes you can post it to reddit

[Valen3D]

Someone got's new informations about simjacker ? I so scary to see the binary code on internet... it's possible?