University of Birmingham researchers identify SIM card security risks

SIM card hacking cybersecurity Proactive SIM mobile modem vulnerabilities CATana tool

Researchers from the University of Birmingham, in collaboration with IT security firm Fuzzware, have identified significant security vulnerabilities in SIM cards. Using a custom tool named CATana, the team tested 26 devices, including smartphones and mobile modules used in vehicles and industrial plants.

The study highlights that the ‘Proactive SIM’ function, which allows a SIM card to send direct instructions to a mobile modem via AT commands, can be exploited. A compromised SIM could potentially force a device to downgrade from a secure 4G network to an older 2G network, serving as an entry point for broader attacks on smartphones, routers, and connected infrastructure.

Entities

Android · Christian Drexler · Fuzzware · Kathrin Rudolph · Kristian Covic · Marius Muench · Microsoft Windows · Munich Police · Tomasz Piotr Lisowski · University of Birmingham · iPhone

Claims

What the coverage asserts, and how many sources carry each claim.

[● 3 SOURCES] The USB transfer method described does not apply to iPhones. www.leinetal24.de
[● 3 SOURCES] Android smartphones and many MP3 players allow music transfer via USB cable without specialized software. www.leinetal24.de
[● 3 SOURCES] Music files must be stored as files on the Windows PC to be transferred via this method. www.leinetal24.de
[● 3 SOURCES] The guide was produced in partnership with Computerwissen.de. www.leinetal24.de
[● 3 SOURCES] Users must select the 'File Transfer' mode on Android devices when connecting to a Windows PC. www.leinetal24.de