News / Science & Technology

UN Warns on Mobile Cybersecurity Bugs to Prevent Attacks

A woman holds up a SIM card, which she won in a June lottery, in Rangoon, Burma, June 24, 2013. A woman holds up a SIM card, which she won in a June lottery, in Rangoon, Burma, June 24, 2013.
x
A woman holds up a SIM card, which she won in a June lottery, in Rangoon, Burma, June 24, 2013.
A woman holds up a SIM card, which she won in a June lottery, in Rangoon, Burma, June 24, 2013.
Reuters
A United Nations group that advises nations on cybersecurity plans to send out an alert about significant vulnerabilities in mobile phone technology that could potentially enable hackers to remotely attack at least half a billion phones.

The bug, discovered by German firm, allows hackers to remotely gain control of and also clone certain mobile SIM cards.

Hackers could use compromised SIMs to commit financial crimes or engage in electronic espionage, according to Berlin's Security Research Labs, which will describe the vulnerabilities at the Black Hat hacking conference that opens in Las Vegas on July 31.

The U.N.'s Geneva-based International Telecommunications Union, which has reviewed the research, described it as "hugely significant."

"These findings show us where we could be heading in terms of cybersecurity risks," ITU Secretary General Hamadoun Touré told Reuters.

He said the agency would notify telecommunications regulators and other government agencies in nearly 200 countries about the potential threat and also reach out to hundreds of mobile companies, academics and other industry experts.

A spokeswoman for the GSMA, which represents nearly 800 mobile operators worldwide, said it also reviewed the research.

"We have been able to consider the implications and provide guidance to those network operators and SIM vendors that may be impacted," said GSMA spokeswoman Claire Cranton.

Nicole Smith, a spokeswoman for Gemalto NV, the world's biggest maker of SIM cards, said her company supported GSMA's response.

"Our policy is to refrain from commenting on details relating to our customers' operations," she said.

Becoming the SIM

Cracking SIM cards has long been the Holy Grail of hackers because the tiny devices are located in phones and allow operators to identify and authenticate subscribers as they use networks.

Karsten Nohl, the chief scientist who led the research team and will reveal the details at Black Hat, said the hacking only works on SIMs that use an old encryption technology known as DES. The technology is still used on at least one out of eight SIMs, or a minimum of 500 million phones, according to Nohl.

The ITU estimates some 6 billion mobile phones are in use worldwide. It plans to work with the industry to identify how to protect vulnerable devices from attack, Touré said.

Once a hacker copies a SIM, it can be used to make calls and send text messages impersonating the owner of the phone, said Nohl, who has a doctorate in computer engineering from the University of Virginia.

"We become the SIM card. We can do anything the normal phone users can do," Nohl said in a phone interview. "If you have a MasterCard number or PayPal data on the phone, we get that too."

IPhone, Android, BlackBerry

The mobile industry has spent several decades defining common identification and security standards for SIMs to protect data for mobile payment systems and credit card numbers. SIMs are also capable of running apps.

Nohl said Security Research Labs found mobile operators in many countries whose phones were vulnerable, but declined to identify them. He said mobile phone users in Africa could be among the most vulnerable because banking is widely done via mobile payment systems with credentials stored on SIMs.

All types of phones are vulnerable, including iPhones from Apple Inc, phones that run Google Inc's Android software and BlackBerry Ltd smartphones, he said.

BlackBerry's director of security response and threat analysis, Adrian Stone, said in a statement that his company proposed new SIM card standards last year to protect against the types of attacks described by Nohl, which the GSMA has adopted and advised members to implement.

Apple and Google declined comment.

CTIA, a U.S. mobile industry trade group based in Washington, D.C., said the new research likely posed no immediate threat.

"We understand the vulnerability and are working on it," said CTIA Vice President John Marinho. "This is not what hackers are focused on. This does not seem to be something they are exploiting."

You May Like

Video Falling Gas Prices Impact US Oil Extraction

With the price of oil now less than $80 a barrel, motorists throughout the US are seeing gas prices dip below $3 a gallon More

Afghan Women's Soccer Team Building for the Future

A four-team female league was recently set up in Kabul; It will help identify players for the national team More

Video Tensions Build on Korean Peninsula Amid Military Drills

Pyongyang threatens nuclear test as joint US, S. Korean exercises show forces’ capabilities More

Featured Videos

Your JavaScript is turned off or you have an old version of Adobe's Flash Player. Get the latest Flash player.
New Skateboard Defies Gravityi
X
November 21, 2014 5:07 AM
A futuristic dream only a couple of decades ago, the hoverboard – a skateboard that floats above the ground - has finally been made possible. While still not ready for mass production, it promises to become a cool mode of transport... at least over some surfaces. VOA’s George Putic reports.
Video

Video New Skateboard Defies Gravity

A futuristic dream only a couple of decades ago, the hoverboard – a skateboard that floats above the ground - has finally been made possible. While still not ready for mass production, it promises to become a cool mode of transport... at least over some surfaces. VOA’s George Putic reports.
Video

Video Falling Gas Prices Impact US Oil Extraction

With the price of oil now less than $80 a barrel, motorists throughout the United States are benefiting from gas prices below $3 a gallon. But as VOA’s Kane Farabaugh reports, the decreasing price of petroleum has a downside for the hydraulic fracturing industry in the United States.
Video

Video Tensions Build on Korean Peninsula Amid Military Drills

It has been another tense week on the Korean peninsula as Pyongyang threatened to again test nuclear weapons while the U.S. and South Korean forces held joint military exercises in a show of force. VOA’s Brian Padden reports from the Kunsan Air Base in South Korea.
Video

Video Mama Sarah Obama Honored at UN Women’s Entrepreneurship Day

President Barack Obama's step-grandmother is in the United States to raise money to build a $12 million school and hospital center in Kogelo, Kenya, the birthplace of the president's father, Barack Obama, Sr. She was honored for her decades of work to aid poor Kenyans at a Women's Entrepreneurship Day at the United Nations.
Video

Video Gay Evangelicals Argue That Bible Does Not Condemn Homosexuality

More than 30 U.S. states now recognize same-sex marriages, and an increasing number of mainline American churches are blessing them. But evangelical church members- which account for around 30 percent of the U.S. adult population - believe the Bible unequivocally condemns homosexuality. VOA's Jerome Socolovsky reports that gay, lesbian, bisexual and transgender evangelicals are coming out. Backed by a prominent evangelical scholar, they argue that the traditional reading of the bible is wrong.
Video

Video Ebola Economic Toll Stirs W. Africa Food Security Concerns

The World Bank said Wednesday that it expects the economic impact of the Ebola outbreak on the sub-Saharan economy to cost somewhere betweenf $3 billion to $4 billion - well below a previously-outlined worst-case scenario of $32 billion. Some economists, however, paint a gloomier picture - warning that the disruption to regional markets and trading is considerable. Henry Ridgwell reports from London.
Video

Video Mexico Protests Escalate Over Disappearances

Protests in Mexico over 43 students missing since September continue to escalate, reflecting growing anger among Mexicans about a political system they view as corrupt, and increasingly tainted by the drug trade. Mounting outrage over the disappearances is now focused on the government of President Enrique Pena Nieto, accused of not doing enough to end insecurity in the country. More from VOA's Victoria Macchi.
Video

Video US Senate Votes Down Controversial Oil Pipeline - For Now

The U.S. Senate has rejected construction of a controversial pipeline to transport Canadian oil to American refineries. The $5 billion project still could be approved next year, but it faces a possible veto by President Barack Obama. As VOA’s Michael Bowman reports, the pipeline has exposed deep divisions in Congress about America’s energy future.
Video

Video Can Minsk Cease-fire Agreement Hold?

Growing tensions between government troops and separatists in eastern Ukraine further threaten a cease-fire agreement reached two months ago in the Belarusian capital of Minsk. Critics of U.S. policy in Ukraine say it is time the Obama administration gives up on that much-violated cease-fire and moves toward a new deal with Russia. VOA's Scott Stearns has more.
Video

Video Chaos, Abuse Defy Solution in Libya

The political and security crisis in Libya is deepening, with competing governments and, according to Amnesty International, widespread human rights violations committed with impunity. VOA’s Al Pessin reports from London.
Video

Video US Hosts Record 866,000 Foreign Students

Close to 900,000 international students are studying at American universities and colleges, more than ever before. About half of them come from Asia, mostly China. The United States hosts more foreign students than any other country in the world, and its foreign student population is steadily growing. Zlatica Hoke reports.
Video

Video Ferguson Church Grapples with Race Relations

Many white residents of Ferguson, Missouri, say they chose to live there because of the American Midwest community's diversity. So, they were shocked when a white police officer killed an unarmed black teenager in August – and shaken by the resulting protests and violence. Some local churches are leading conversations on how to go forward. VOA’s Ayesha Tanzeem reports.

All About America

AppleAndroid