Black Hat: Mobile carriers react quickly to major SIM card vulnerability

Share this article:
When reports were published detailing how vulnerable SIM cards are to attacks, many mobile companies were quick to react, according to the security researcher that discovered the vulnerability.

Just weeks ago, Karsten Nohl, founder of Security Research Labs, announced his findings regarding the massive mobile vulnerability that could affect hundreds of millions of mobile phones worldwide. Knowing the findings would be presented in detail at Black Hat 2013 in Las Vegas created a deadline for mobile carriers, he said.

"Industry was extremely fast to respond to this," Nohl said during his talk on Wednesday. "[They] took away the incentives for criminals to even research this vulnerability by putting in the fix even before we got to demonstrate it."

During the two-year research process, more than 1,000 SIM cards were experimented on by Nohl and his team. The findings revealed a major vulnerability in SIM cards that would allow an attacker to download malicious software onto the victim's SIM card, access data and operate it as the normal owner would.

According to Nohl, the process would start when a miscreant sends a text message to the victim's SIM card that they don't even see because it's sent in binary format. While the message attempts to communicate with the SIM card, there are security protocols in place that causes the card to flag the message. The SIM then responds to the attacker's message and within that message is data that can be decrypted due to the antiquated Data Encryption Standard (DES) technology used by mobile carriers, Nohl said.

Included in the data is a cryptographic signature key that would allow the attacker to upload small applications – known as applets – to the device, giving them complete control of it, Nohl said.

While some mobile carriers brushed off the vulnerability, leading him to believe they didn't look into the issue, Nohl said that a majority of the industry has been extremely constructive working with his team as well as with one another.

"[That] made this a real success story in mitigation," he said. "It is a new research field that generated the first, not the last, results of its kind."
Share this article:

Sign up to our newsletters

More in News

Report: SQL injection a pervasive threat, behavioral analysis needed

Report: SQL injection a pervasive threat, behavioral analysis ...

Long lag times between detection and resolution and reliance on traditional methods impair an organization's ability to combat SQL injection attacks.

WhatsApp bug allows for interception of shared locations

Researchers identified a vulnerability in WhatsApp that could enable an attacker to intercept shared locations using a man-in-the-middle attack, or a rogue access point.

Google tweaks its terms of service for clarity on Gmail scanning

The company is currently dealing with a lawsuit that challenges its email scanning practices.