3 ms·
> How hard are these attacks to actually execute? Fake roaming request, and that's it. > Can someone with an SDR and no credentials start an attack? No, but
by baybal2 6y ago
> How hard are these attacks to actually execute?
Fake roaming request, and that's it.
> Can someone with an SDR and no credentials start an attack?
No, but any telco employee in the world with keys to the server room can.
The matter is SS7 vulnerabilities are not Man-in-the-Middle in nature, but Man-on-the-Other-Side-of-the-World in nature.
- DarthGhandi 6y ago> keys to the server room That's far beyond, keys to server room is access to basically every phone on the network. For nearly a decade or so any kid in a mall kiosk can pull off sim cloning attacks. Yet we still use sms as a second factor.