750 million phones under threat after SIM encryption flaw found

<div dir="ltr" style="text-align: left;" trbidi="on"> <div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNGd1Z-wj-ZBiBmH7cvWBXrxASztTWwT301I4qojImg_kY-FlfKfXpOoq1JO2h4uhyphenhyphenfYaXbH-zIxVbNlthrWW_KIapTCNoBNJBFga8oCZGJRi4fc9d3DJBGZnBPz8ldZWPRFdr9insJgsi/s1600/sim-mobile-bug-nohl-hacking.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="225" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNGd1Z-wj-ZBiBmH7cvWBXrxASztTWwT301I4qojImg_kY-FlfKfXpOoq1JO2h4uhyphenhyphenfYaXbH-zIxVbNlthrWW_KIapTCNoBNJBFga8oCZGJRi4fc9d3DJBGZnBPz8ldZWPRFdr9insJgsi/s400/sim-mobile-bug-nohl-hacking.jpg" width="400" /></a></div> <span style="font-family: Arial, Helvetica, sans-serif;"><span style="background-color: white;"><br /></span></span> <span style="font-family: Arial, Helvetica, sans-serif;"><span style="background-color: white;">A mobile security expert has reportedly found a flaw in some SIM cards that could allow hackers to obtain a SIM card's digital key and takeover the phone, The New York Times reports Karsten Nohl, founder of Security Research Labs in Berlin, tested the encryption hole and uncovered that he was allowed to send a virus to the SIM card via </span><span style="background-color: white;">SMS, which let him listen to the caller, make mobile payments and impersonate the owner.</span></span><br /> <span style="background-color: white;"><span style="font-family: Arial, Helvetica, sans-serif;"><br /></span></span> <span style="background-color: white;"><span style="font-family: Arial, Helvetica, sans-serif;">SIM cards with D.E.S - data encryption standard - are those that could be affected by the encryption flaw and an estimated 750 million SIM cards could be vulnerable for attack Mr. Nohl reportedly said that around one-quarter of DES SIM cards showed the flaw.The past decade has seen DES replaced by Triple DES, but around half of around six billion phones used daily still run on the old method.</span></span><br /> <span style="background-color: white;"><span style="font-family: Arial, Helvetica, sans-serif;"><br /></span></span> <span style="background-color: white;"><span style="font-family: Arial, Helvetica, sans-serif;">Claire Cranton, a spokeswoman from GSM Association in London states, "We have been able to consider the implications and provide guidance to those network operators and SIM vendors that may be impacted," The NY Times reports Mr. Nohl has also advised better filtering technology to block the virus messages he sent and advised a phase out of the DES SIM card.</span></span><br /> <span style="background-color: white;"><span style="font-family: Arial, Helvetica, sans-serif;"><br /></span></span> <span style="background-color: white;"><span style="font-family: Arial, Helvetica, sans-serif; font-size: x-small;">Source: The New York Times</span></span></div>

750 million phones under threat after SIM encryption flaw found

A mobile security expert has reportedly found a flaw in some SIM cards that could allow hackers to obtain a SIM card's digital key a...

Read more »