Show threadKevin Karhan Mar 3

@F3715H @maddy +1

Interestingly the whole #SimSwapping #fraud shite is basically a #US-centric thing.

Cuz I've not heard of any successful #SimSwap fraud ring in #Germany.

https://thegayagenda.fans/notes/ajd3pmwhdhbc0scn

Maddy - Floofy fops friend :neofox_floof_happy: (@maddy)

Ah, I see that Virgin Mobile/Bell is still blatantly violating the CRTC's unlocking mandate... (📎1) RE: All telecoms are bastards. Same with insurance companies. RE: ...

The Gay Agenda Fans
infosertecla.comFeb 25

WhatsApp prepara el «Triple Bloqueo» – Una nueva contraseña alfanumérica para detener el robo de cuentas

En su lucha constante contra el SIM swapping (clonación de tarjetas SIM) y el robo de identidad, WhatsApp está desarrollando una función que promete cambiar las reglas del juego de la seguridad móvil. Según filtraciones de la beta de Android (versión 2.26.7.8) reportadas por Wabetainfo, la aplicación permitirá configurar una contraseña alfanumérica opcional que servirá como un escudo final, incluso si un atacante logra obtener tu código de verificación por SMS.

Hasta ahora, la seguridad de WhatsApp dependía principalmente de un código de seis dígitos enviado por SMS. Si un hacker lograba interceptar ese código mediante engaños o técnicas de duplicación de SIM, podía tomar el control de la cuenta. Con esta nueva actualización, WhatsApp añade una barrera física y digital que hará que hackear una cuenta sea una tarea casi imposible para el atacante común.

Las tres capas de la nueva defensa

Cuando esta función se despliegue globalmente, el proceso de inicio de sesión en un nuevo dispositivo podrá incluir hasta tres pasos de verificación:

  • Código SMS: El tradicional código de 6 dígitos enviado a tu número de teléfono.
  • Verificación en dos pasos (PIN): El código numérico que muchos usuarios ya tienen activo.
  • Nueva Contraseña de Cuenta: Una clave alfanumérica personalizada de entre 6 y 20 caracteres (que debe incluir al menos una letra y un número).

    • ¿Por qué es importante este cambio?

    El gran valor de esta contraseña es que es independiente del número de teléfono. Mientras que el SMS y el PIN de 2FA pueden ser vulnerables si alguien tiene acceso a tu línea o realiza ingeniería social, la contraseña alfanumérica reside únicamente en tu memoria (o gestor de contraseñas), actuando como una «llave maestra» que el atacante no podrá resetear fácilmente desde otro dispositivo.

    Más seguridad: «Strict Account Settings»

    Esta novedad se suma al reciente lanzamiento de las «Strict Account Settings» (Ajustes Estrictos de Cuenta), un modo de «bloqueo total» diseñado para perfiles de alto riesgo como periodistas o figuras públicas. Al activar este modo, WhatsApp:

    • Bloquea automáticamente archivos y fotos de números desconocidos.
    • Silencia llamadas de desconocidos.
    • Desactiva las vistas previas de enlaces para evitar el rastreo de IP.
    • Reescribe parte de su código en Rust, un lenguaje de programación mucho más seguro contra el espionaje y el malware.

    Disponibilidad

    La función de contraseña alfanumérica se encuentra actualmente en fase de desarrollo y aún no ha llegado a los usuarios de la versión estable. Sin embargo, se espera que WhatsApp comience las pruebas con usuarios beta en las próximas semanas. Es una función opcional, por lo que cada usuario podrá decidir qué nivel de fricción y seguridad desea para su cuenta.

    Con estos movimientos, Meta busca que 2026 sea el año en el que el robo de cuentas de WhatsApp deje de ser una noticia diaria, moviendo el estándar de seguridad de las aplicaciones de mensajería hacia un modelo de «confianza cero».

    #Android17 #Antihack #arielmcorg #ciberseguridad #infosertec #innovación #meta #PORTADA #privacidad #SIMswapping #TechNews #tecnología #whatsapp
    Hackread.comAug 22, 2025

    #ScatteredSpider hacker Noah Michael Urban sentenced to 10 years in prison and ordered to pay $13 million after #SIMSwapping and phishing scam related crimes.

    Read: https://hackread.com/scattered-spider-hacker-noah-michael-urban-jailed/

    #CyberSecurity #CyberCrime #NoahMichaelUrban

    Scattered Spider Hacker Noah Michael Urban Jailed for 10 Years

    Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

    Hackread - Latest Cybersecurity, Hacking News, Tech, AI & Crypto
    ITSEC NewsAug 21, 2025
    SIM-Swapper, Scattered Spider Hacker Gets 10 Years - A 20-year-old Florida man at the center of a prolific cybercrime group known as “S... https://krebsonsecurity.com/2025/08/sim-swapper-scattered-spider-hacker-gets-10-years/ #judgeharveye.schlesinger #neer-do-wellnews #noahmichaelurban #scatteredspider #news4jax.com #scatterswine #simswapping #mailchimp #starfraud #doordash #lastpass #t-mobile #kingbob #oktapus #unc3944 #thecom #twilio #plex #sosa
    SIM-Swapper, Scattered Spider Hacker Gets 10 Years – Krebs on Security

    KrebsOnSecurity RSSAug 21, 2025

    SIM-Swapper, Scattered Spider Hacker Gets 10 Years

    https://krebsonsecurity.com/2025/08/sim-swapper-scattered-spider-hacker-gets-10-years/

    #JudgeHarveyE.Schlesinger #Ne'er-Do-WellNews #NoahMichaelUrban #ScatteredSpider #News4Jax.com #ScatterSwine #SIMSwapping #Mailchimp #StarFraud #DoorDash #lastpass #T-Mobile #KingBob #Oktapus #UNC3944 #TheCom #Twilio #Plex #Sosa

    SIM-Swapper, Scattered Spider Hacker Gets 10 Years – Krebs on Security

    chirpAug 14, 2025

    Reconnaissance faciale & vérifications d'empreintes digitales, le nouveau système de vérification biométrique en quasi temps réel conçu par 🇬🇧 Vigilate AI se généralisera à tous les points de vente MTN Afrique du Sud. #telecom #stores #customers #services #citizens #digital #identity #marketplace #surveillance #ai #technologies #systems #biometrics #idtheft #scams #mobile #phone #frauds #solutions #escroqueries #threats #arnaques #simswapping [ https://www.itweb.co.za/article/mtn-sa-launches-real-time-biometric-id-in-all-stores/lwrKxq3Y95b7mg1o ] #informatique

    MTN South Africa has announced the full-scale deployment of a digital ID system, with real-time biometrics, on any device across all MTN stores nationwide.

    MTN SA launches real-time biometric ID in all stores

    The mobile operator establishes a nationwide digital ID system to speed up onboarding and combat identity fraud.

    ITWeb
    Show threadKevin Karhan Jul 15, 2025

    @stman @Sempf @LaF0rge yes.

    Because physical SIMs, like any "cryptographic chipcard" (i.e. @nitrokey ) did all that fancy public/private crypto on silicon and unless that was compromizeable (which AFAICT always necessistated physical access to the #SIM, espechally in pre-#OMAPI devices) the SIM wasn't 'cloneable' and the weakest link always had been the #MNO /.#MVNO issueing (may it be through #SocialHacking employees into #SimSwapping or LEAs showng up with a warrant and demanding "#LawfulInterception"):

    Add to that the regression in flexibility:

    Unlike a #SimCard which was designed as a vendor-independent, #MultiVendor, #MultiProvider, device agnostic unit to facilitate the the #authentification and #encryption in #GSM (and successor standards), #eSIMs act to restrict #DeviceFreedom and #ConsumerChoice, which with shit like #KYC per #IMEI (i.e. #Turkey demands it after 90 days of roaming per year) und #lMEI-based #Allowlisting (see #Australia's shitty #VoLTE + #2G & #3G shutdown!) are just acts to clamp down on #privacy and #security.

    • And with #EID being unique per #eSIM (like the #IMEI on top!) there's nothing stopping #cyberfacist regimes like "P.R." #China, #Russia, #Iran, ... from banning "#eSIMcards" (#eSIM in SIM card form factor) or entire device prefixes (i.e. all phones that are supported by @GrapheneOS ), as M(V)NOs see the EID used to deploy/activate a profile (obviously they don't want people to activate eSIMs more than once, unless explicitly allowed otherwise.

    "[…] [Technologies] must always be evaluated for their ability to oppress. […]

    • Dan Olson

    And now you know why I consider a #smartphone with eSIM instead of two SIM slots not as a real #DualSIM device because it restricts my ability to freely move devices.

    • And whilst German Courts reaffirmed §77 TKG (Telco Law)'s mandate to letting people choose their devices freely, (by declarong #fees for reissue of eSIMs illegal) that is only enforceable towards M(V)NOs who are in #Germany, so 'good luck' trying to enforce that against some overseas roaming provider.

    Thus #Impersonation attacks in GSM-based networks are easier than ever before which in the age of more skilled than ever #Cybercriminals and #Cyberterrorists (i.e. #NSA & #Roskomnadnozr) puts espechally the average #TechIlliterate User at risk.

    • I mean, anyone else remember the #Kiddies that fucked around with #CIA director #Brennan? Those were just using their "weapons-grade #boredom", not being effective, for-profit cyber criminals!

    And then think about those who don't have privilegued access to protection by their government, but rather "privilegued access" to prosecution by the state because their very existance is criminalized...

    The only advantage eSIMs broight in contrast is 'logistical' convenience because it's mostly a #QRcode and that's just a way to avoid typos on a cryptic #LocalProfileAgent link.

    Alcea BotJul 4, 2025
    𒐫Tipp Nummer 4: besitze keine Kreditkarte Tipp Nummer 5: zahle deine Miete / Kredite und behalte niemals mehr als du brauchst auf deinem Konto. Sichere alles was du dir sparst Zuhause iwo. Nicht nur wegen hacmini sondern auch wegen den Banken. Falls es mal Stromausfälle geben sollte wie in Spanien oder Portugal für eine längere Zeit oder im schlimmsten Fall ein Krieg bricht aus, ist dein Erspartes futsch. Ja hört sich extrem an aber gehe auf Nummer sicher. Man weis nie 😅𒐫 #simswapping https://m.youtube.com/watch?v=-V75SujMTzg&pp=0gcJCfwAo7VqN5tD #simswapping
    Loki the CatJul 1, 2025

    AT&T rolls out Account Lock to stop SIM swappers - because apparently "please don't steal my phone number" wasn't clear enough the first time. 📱🔒

    SIM swapping = criminals hijack your number to intercept 2FA codes. AT&T joins T-Mobile, Verizon & Google Fi in offering this protection.

    https://tech.slashdot.org/story/25/07/01/181213/att-now-lets-customers-lock-down-account-to-prevent-sim-swapping-attacks

    #ATT #CyberSecurity #SIMSwapping

    AT&T Now Lets Customers Lock Down Account To Prevent SIM Swapping Attacks - Slashdot

    AT&T has launched a new Account Lock feature designed to protect customers from SIM swapping attacks. The security tool, available through the myAT&T app, prevents unauthorized changes to customer accounts including phone number transfers, SIM card changes, billing information updates, devic...

    ResearchBuzz: FirehoseMay 21, 2025

    The Register: SEC SIM-swapper who Googled ‘signs that the FBI is after you’ put behind bars. “An Alabama man who SIM-swapped his way into the SEC’s official X account, enabling a fake ETF announcement that briefly pumped Bitcoin, has been sentenced to 14 months in prison and three years of supervised release. Prior to his conviction and sentencing on Friday, Eric Council Jr., 26, of […]

    https://rbfirehose.com/2025/05/21/the-register-sec-sim-swapper-who-googled-signs-that-the-fbi-is-after-you-put-behind-bars/

    The Register: SEC SIM-swapper who Googled ‘signs that the FBI is after you’ put behind bars | ResearchBuzz: Firehose

    ResearchBuzz: Firehose | Individual posts from ResearchBuzz