{"id":35992,"date":"2020-07-09T15:44:29","date_gmt":"2020-07-09T15:44:29","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/31375\/Verizon-Adds-Protection-Against-SIM-Swapping-Hacks-In-Mobile-App.html"},"modified":"2020-07-09T15:44:29","modified_gmt":"2020-07-09T15:44:29","slug":"verizon-adds-protection-against-sim-swapping-hacks-in-mobile-app","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/verizon-adds-protection-against-sim-swapping-hacks-in-mobile-app\/","title":{"rendered":"Verizon Adds Protection Against SIM Swapping Hacks In Mobile App"},"content":{"rendered":"
<\/p>\n

Verizon has added a new feature in its official mobile app that makes it easier to protect your phone number from hackers.<\/p>\n

<\/span><\/p>\n

At the end of June, the company launched<\/a> a feature called \u201cNumber Lock,\u201d which makes it easier for users to enable protection that could potentially stop SIM swapping<\/a> hacks. Verizon customers can now enable this protection directly from the \u201cMy Verizon\u201d app and with just a tap, as Motherboard verified this week.<\/p>\n

<\/span><\/p>\n

\n
\n
<\/picture><\/div>\n<\/div>\n
\n

A screenshot of the My Verizon app interface. (Image: Motherboard)<\/p>\n<\/div>\n<\/div>\n

<\/p>\n

The feature is essentially \u201can extra layer of security\u201d and \u201ca freeze\u201d on the number, as a Verizon customer support representative explained. When enabled, if someone impersonates the customer and tries to port out their number, Verizon notifies the customer via text message or email, attempting to verify that it\u2019s really them.<\/p>\n

<\/span><\/p>\n

It’s not foolproof, however. As the customer support rep said, Verizon employees can override this once the customer verifies themselves\u2014meaning they have the ability to do it anyway if the hacker were to accomplish that. In any case, this does in theory add an extra layer of security and makes it harder to pull off a SIM swapping attack.<\/p>\n

<\/span><\/p>\n

Verizon did not respond to a request for comment inquiring about how the feature works, and instead linked us to its official support page<\/a>.<\/p>\n

<\/span><\/p>\n

\n

Do you work at Verizon or another wireless carrier? If you have any tips about SIM swapping or other hacks, using a non-work phone or computer, you can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1 917 257 1382, OTR chat at lorenzofb@jabber.ccc.de<\/a>, or email<\/em><\/strong> lorenzofb@vice.com<\/em><\/strong><\/a><\/p>\n<\/blockquote>\n

<\/p>\n

\u201cPresuming this user-controlled toggle can\u2019t be overridden by a bribed customer service rep or access to a back-end dashboard, this would appear to solve the problem,\u201d Michael Terpin, one of the most well-known victims of SIM swapping<\/a> who is suing AT&T for damages, told Motherboard. \u201cIf so, kudos to Verizon. Hopefully, T-Mobile and AT&T follow their lead.\u201d<\/p>\n

<\/span><\/p>\n

Thousands of people across the United States<\/a> have been victims of SIM swapping hacks, which are also called port out scams\u2014an expression derived from the concept of porting a number from one carrier to another\u2014and SIM hijacking.<\/p>\n

<\/span><\/p>\n

These kinds of hacks are aimed at defeating two-factor authentication systems that rely on SMS, and they are relatively easy to pull off. Hackers usually impersonate the target and pretend they need to transfer their number to a new SIM card, or simply bribe telecom employees<\/a> to achieve the same goal<\/a>. Once they have control of the phone number, they can use it to reset the victims\u2019 passwords on sensitive accounts like their email, or steal money from their online cryptocurrency wallets.<\/p>\n

<\/span><\/p>\n

For years, telecom companies have been struggling to slow down these hacks, and users have been left alone in figuring out ways to protect themselves<\/a>.<\/p>\n

<\/span><\/p>\n

Verizon has historically been one of the hardest targets for SIM swappers. Last year, Motherboard reported that the company\u2019s security procedures already were making it harder for hackers<\/a> to target their customers, compared to other telecom companies. Making it easier to enable Number Lock will make it even easier for customers to turn on protections that could significantly slow down or even prevent SIM swapping hackers.<\/p>\n

<\/span><\/p>\n

A spokesperson for AT&T said that the company has \u201csecurity measures in place, and continue to add more, to help prevent fraud including SIM swaps and porting.\u201d<\/p>\n

<\/span><\/p>\n

\u201cWe have recently implemented a new process involving risk assessments and text-message notification for numbers being ported to another carrier,\u201d the spokesperson said in an email.<\/p>\n

<\/span><\/p>\n

T-Mobile and Sprint did not respond to a request for comment.<\/p>\n

<\/span><\/p>\n

Subscribe to our new cybersecurity podcast,<\/em><\/strong> CYBER<\/em><\/strong><\/a>.<\/em><\/strong><\/p>\n

<\/span><\/div>\n

\n