Researchers: ‘Simjacker’ Attack Silently Tracks Your Phone

Both Apple and Google spend a great deal of time and energy strengthening the security of their mobile platforms. No piece of software is perfect, but Android and iOS are overall very secure these days. That doesn’t matter when an attack can completely bypass your operating system. Researchers from AdaptiveMobile Security say they’ve uncovered an attack method dubbed Simjacker that can track users by sending a text message.

AdaptiveMobile says the attack works on devices from Motorola, Apple, Google, Huawei, and more. It’s all about the technology inside the SIM card, and this isn’t an attack that just popped up. AdaptiveMobile says it has found evidence that Simjacker has been active in highly targeted attacks for up to two years.

AdaptiveMobile has not revealed the company or government that is using Simjacker, but says it’s not a mass surveillance operation. Instead, the perpetrator is tracking a small number of targets multiple times per day. Some numbers investigated by the researchers were pinged for location hundreds of times per week.

The good news is that mobile operators should be able to quickly put a stop to Simjacker. It relies on sending binary code to devices in the form of an SMS rather than a normally formatted SMS message. That should make it easy to filter at the network level.

Continue reading

Plex Media Servers Being Used to Amplify DDoS Attacks

The researchers claim that a Plex server, properly utilized, can increase the size of DDoS packets by almost five times, making these attacks much more damaging. There's not much Plex users can do about it right now, either.

Cyberpunk Developer Hit with Ransomware Attack

The perpetrators claim to have swiped source code to the company's games, as well as embarrassing internal documents. All will be released unless CDPR pays up, which it says it isn't going to do.

Apple Files Lawsuit Against NSO Group for its Pegasus Spyware Attacks

Apple has announced a lawsuit against NSO Group and its parent company over its Pegasus spyware, seeking to prevent the group from using any of Apple's services and hardware in the future.

Nvidia Hit by Possible Cyber Attack

Reports indicate the attack began at the same time as the Russian incursion into Ukraine.