SIM-Swap

Understanding SIM-Swap

SIM-Swap is a criminal act that specifically targets the vulnerabilities in two-factor authentication (2FA) systems. Many individuals rely on 2FA to enhance the security of their online accounts, such as social media, banking, and more.

These attacks occur when cybercriminals manipulate a victim’s mobile phone service. By doing so, they gain unauthorized access to the victim’s data and transfer their phone number to a new SIM card owned by the hacker. This enables the hacker to access the victim’s email and reset confidential information, including login credentials.

The severity of SIM-Swap attacks increases when the criminal gains access to the victim’s cryptocurrency credentials, including details of their crypto wallets.

What makes SIM-Swap attacks particularly concerning is the ease with which they can be executed. All it takes is for the victim’s mobile carrier number to be transferred to a new phone number controlled by the hacker. There are various methods through which the hacker can achieve this, including phishing or purchasing the victim’s details.

A study conducted by Princeton University in January 2020 found that out of 50 attempts made by researchers to carry out SIM-Swap attacks, 39 were successful. This highlights the alarming success rate of these crimes.

An example of the impact of SIM-Swap attacks is the case of a 15-year-old student in New York who targeted a cryptocurrency entrepreneur. The cybercriminal managed to steal digital assets worth $24 million, resulting in significant financial losses.

Europol, the European Union’s law enforcement agency, successfully identified and dismantled a cybercriminal ring responsible for conducting 100 SIM-Swap attacks. These attacks led to losses amounting to approximately $3.7 million.