Greg's Corner

Tagged: smart phones Toggle Comment Threads | Keyboard Shortcuts

• 

  Geebo 9:02 am on December 10, 2024 Permalink | Reply
  Tags: identity theft ( 108 ), Scams ( 1,386 ), sim swapping ( 9 ), smart phones   

  SIM Swapping Scam Can Happen to Anyone 

  

  By Greg Collier

  The convenience of managing our finances and communications through smartphones comes with significant risks. One of the most insidious threats is SIM swapping, a scam that has left countless victims, including a California resident who recently lost $38,000, in financial turmoil. This incident is a reminder that no one is immune to such scams, and protecting oneself requires awareness.

  SIM swapping occurs when a scammer tricks a mobile carrier into transferring a victim’s phone number to a device they control. This doesn’t require physical access to the victim’s phone. Armed with basic personal information, often gathered through online sources or data breaches, fraudsters impersonate the victim to convince the carrier to make the switch.

  Once the fraudsters gain control of a phone number, the possibilities for exploitation are vast. They can intercept calls and texts, including the two-factor authentication (2FA) codes that are often the last line of defense for financial accounts. This allows them to bypass security measures and initiate fraudulent transactions. Alarmingly, this scam isn’t limited to traditional SIM cards as eSIM technology, which doesn’t rely on a physical SIM, is just as vulnerable.

  The victim in this recent case described the harrowing experience of losing access to his phone and, subsequently, his financial accounts. It started with strange notifications and the sudden inability to connect to his cellular network. Soon after, three wire transfers drained his account of $38,000, funds meant for essential living expenses. Despite reporting the fraud, the initial response from his bank denied his claim, citing a confirmation sent via text, a text the victim never received because his phone number was compromised.

  The frustration and helplessness in such scenarios can be overwhelming. Even after the bank reopened the case, uncertainty loomed about whether the funds would ever be recovered.

  According to the FBI, SIM swapping scams affected over 1,000 victims in 2023, resulting in more than $48 million in losses. The alarming aspect of this scam is that victims don’t need to interact directly with the fraudsters. By leveraging personal information available online, names, addresses, and other seemingly innocuous details, scammers can bypass many security measures.

  This underscores the importance of adopting robust security practices that go beyond traditional protections. Simple measures like setting up a PIN for mobile accounts or using app-based authentication for 2FA can make a significant difference.

  The first step in mitigating the risk of SIM swapping is awareness. Recognize that this scam can target anyone, regardless of the type of phone or SIM technology they use. No phone is inherently safe from this attack, and assuming invulnerability can lead to complacency.

  Strengthening your defenses begins with securing your mobile account. Many carriers offer the option to set a unique PIN or passphrase that is required for account changes. Additionally, wherever possible, replace text-based 2FA with app-based authentication tools, which are less susceptible to interception.

  Being mindful of the information you share online is also critical. Social media profiles and public records can provide scammers with the details they need to impersonate you. Regularly monitor your financial accounts for unusual activity and act quickly if you notice anything suspicious.

  If you fall victim to a SIM swapping scam, report it immediately to your mobile carrier and financial institutions. Additionally, filing a complaint with the FBI’s Internet Crime Complaint Center (IC3) can aid in tracking and combating this growing threat. While recovery may take time, persistence and proper documentation of the fraud are essential.

  SIM swapping is a sobering example of how our reliance on technology can be exploited. By staying informed and implementing strong security measures, individuals can reduce their vulnerability to these devastating scams. This is a collective battle, and vigilance is our best defense.

   

  Leave a ReplyCancel reply
• 

  Geebo 8:00 am on July 17, 2020 Permalink | Reply
  Tags: identity theft ( 108 ), Scams ( 1,386 ), sim jacking ( 3 ), sim swapping ( 9 ), smart phones   

  FTC: SIM swapping on the rise 

  

  Around a decade ago, not everyone had a smartphone. While the iPhone had already been out for three years, many people only had phones that could only make calls and send text messages. Now, the majority of us have smartphones which are basically like having a full-blown computer in your pocket. As such, many of us have very sensitive personal and financial information on our phones. Now, what if someone was able to steal all of that information without having to steal your phone? That’s exactly what happens with SIM swapping.

  SIM swapping is when a scammer or other bad actor is able to convince your cell phone carrier to switch your service to their phone. This way they can have access to the various social media, email, and financial apps that you may have on your phone. SIM swapping is lucrative to scammers because this way they can easily access accounts that are protected by two-factor authentication since many of us use text messaging as our preferred method of 2FA. This is also how they can lock you out of your own accounts after having email addresses and passwords changed.

  Normally, someone would have to give your cell phone carrier a PIN number in order to transfer service to a new device. However, since so many people forget their PINs, some carriers will let you change service after answering a couple of security questions. Scammers can often find the answer to these questions, like your pet’s name or the street you grew up on, from your social media accounts. The Federal Trade Commission has said that SIM swapping has been on the rise in the past few years.

  There are ways to protect yourself from SIM swapping. The first is to not share too much information about yourself on social media that could lead to scammers knowing the answers to your security questions. The other way is to contact your carrier and tell them not to allow any device switching on your account. However, to get your account unfrozen you may have to visit your carrier’s store with your ID.

   
• 

  Geebo 8:00 am on October 15, 2019 Permalink | Reply
  Tags: cybersecurity ( 37 ), phone security ( 6 ), privacy ( 46 ), security ( 46 ), sim jacking ( 3 ), sim swapping ( 9 ), smart phones   

  SIM Swapping can cost you thousands if you’re not careful 

  

  Freelance British food writer Jack Monroe recently made news when she found out that someone stole the phone number to her smartphone. They were then able to transfer the number to another phone where they had access to some of her financial information and were able to steal £5,000 from her personal account. That amount equates to close to $6,300 in the U.S. This is a trick known as SIM_Swapping or SIM-Jacking named after the SIM cards in most smartphones that contain your calling information including your phone number. Unfortunately, there’s not a lot you can do to protect yourself against the attack.

  SIM Swapping works when the victim is targeted by someone with knowledge of how the attack works. First, they get your name, address, and date of birth, then they contact your cell phone carrier to try and convince them that they are you. If the attacker is successful, he can get the carrier to switch your number to their phone. The attacker can then receive all your calls, texts, emails and the like. That way they can receive the two-factor authentication texts that would allow them to access any of your sensitive online accounts including banking.

  [youtube https://www.youtube.com/watch?v=6occS3PyOss%5D

  While most victims of SIM Swapping don’t notice the attack until it’s too late, there are some steps you can take to try to protect yourself although nothing is a guarantee of preventing such an attack. You can instruct your cell phone carrier to require a PIN number if anyone calls to try and have any portion of your service changed. As with most PINs, don’t make it something obvious that an attacker can guess like your birthdate. You can also sign up for a Google Voice number which is much more secure and tougher to attack than a traditional cell phone number but work just like a traditional phone number and they are also free to get.

   
• 

  Geebo 8:00 am on September 6, 2019 Permalink | Reply
  Tags: advertising ( 11 ), eavesdropping, privacy ( 46 ), smart phones, social media ( 81 )   

  Is your phone really eavesdropping on you? 

  

  Has this ever happened to you? You’re just innocently talking with your friends or family about something you normally don’t talk about. Then you see an ad on your phone for the very thing you were talking about. There’s plenty of anecdotal evidence out there to suggest that companies like Facebook and Google are eavesdropping on your private conversations so they can serve you more targeted ads. It’s compounded by the fact that companies like Apple, Microsoft, and Amazon have admitted that human contractors listen in on conversations heard by digital assistants. However, at least one study says that the eavesdropping phone is largely a myth.

  A mobile security company called Wandera has said that they’ve conducted research which they say shows that tech companies are not listening to your conversations. They placed an iPhone and an Android phone in a chamber where pet food advertisements continuously played. Both phones were running Facebook, Instagram, Chrome, SnapChat, YouTube, and Amazon in the background. However, the researchers did not witness any related ads on the devices in question. The researchers also say that the data used by both devices indicate that conversations are not being sent to the major tech companies. That’s not to say that tech companies aren’t tracking us in other ways.

  [youtube https://www.youtube.com/watch?v=CpAhtbxSCEU%5D

  Other things like location data and browsing histories are said to be more effective in serving us targeted ads. Also, if you use a loyalty card at any store, advertising companies buy that information from the store and can match it with your social media accounts. Supposedly, there are sett9ngs on your phone where you can limit such targeting, however, we’ve either not been able to find these settings or they’re buried so deep in the app’s settings that it makes it difficult to escape targeting.

   
• 

  Geebo 8:10 am on August 22, 2019 Permalink | Reply
  Tags: education ( 3 ), school ( 3 ), smart phones   

  Should schools take students’ phones? 

  

  It seems that kids are getting their own phones at younger and younger ages. While smartphones can be a very useful tool for school-age children, they can also be a large distraction while in class. School faculties have struggled with the debate over whether or not their students should have access to their phones while school is in session. While one may think that students without their phones would be less distracted, there’s no conclusive evidence to show that taking away their phones improves grades. However, one school in California is taking an unusual approach to the students and phones problem.

  San Mateo High School in Northern California has required students to keep their phones in a magnetically sealed bag. The students keep the bags on them during school hours but they do not have access to their phones until school is over. At that point, the school opens the bags for students with a device that looks similar to an anti-shoplifting device you might see at a store checkout. Some students have complained that the school does not unlock their phones during lunch but that sounds more like a logistical issue than one of admonishment. San Mateo High is not the first school to use these devices.

  [youtube https://www.youtube.com/watch?v=rcDbJwZ7G9k%5D

  There appears to be at least one drawback to this program and that is one of student safety. Sadly, our schools have become targets of violence and threats. While the odds of a violent attack happening at any particular school is low, it is, unfortunately, a real possibility these days. If an attack were to happen and students would need to contact law enforcement or family would there be a way to release the bags during an emergency? While this is a worst-case scenario, it seems like this is a concern that needs to be addressed by schools using the device.

   
• 

  Geebo 10:40 am on January 9, 2019 Permalink | Reply
  Tags: Android ( 8 ), Facebook ( 180 ), Samsung ( 4 ), smart phones   

  Many Android users can’t delete Facebook even if they wanted to 

  

  Nothing is more frustrating to an android user than when you have limited storage space and there are bloatware apps on your device that can’t be deleted. A number of phone companies include these indestructible apps in order to make money through various partnerships by nudging their customers into using these apps. However, unlike a computer where you can delete just about anything, many Android users are locked into these apps for the life of their device. Now, it’s being reported that a company not known for its security or privacy is allegedly paying at least one major phone manufacturer into making its app irremovable.

  Bloomberg has reported that Facebook is not only coming pre-installed on many of Samsung’s flagship phones but that the Facebook app can’t be deleted as well. While the app can be put in a disabled app that hasn’t stopped Samsung customers from being concerned about what personal data may have been sent to Facebook. Considering Facebook’s less than stellar year when it came to privacy and security, this seems to be a valid concern. Facebook claims that when their app is in disabled mode that it’s the same as if the app had been deleted. That’s not reassuring to many users who want the app off of their phone for good which puts Samsung in an anti-consumer light even though Samsung has said they’re trying to give consumers the best out of the box experience.

  [youtube https://www.youtube.com/watch?v=hWyv3AEX_Lg%5D

  Unfortunately, Samsung isn’t the only manufacturer that includes permanent apps and Facebook isn’t the only company pushing them. Most cellular carriers include apps for their various services that can’t be deleted as does Google who created and maintains the Android operating system. While Facebook may be taking the brunt of criticism right now it’s just a symptom of a larger problem where consumers do not have the freedom to do what they want with the phones that they’ve paid for. Considering how expensive some of these devices are shouldn’t the choice of whether or not the customer wants to have Facebook on their phone be left up to them?

   
• 

  Geebo 10:00 am on December 24, 2018 Permalink | Reply
  Tags: FCC ( 29 ), smart phones, text messaging ( 36 )   

  Is the FCC cracking down on text spam or are they opening the door to censorship? 

  

  Text messaging may just be one of the greatest inventions of mankind. It allows us to send quick messages to our friends and family without having to involve ourselves in lengthy and often times inconvenient phone calls. That’s not even taking into account how many services we can use just through text messaging alone. By some estimates, SMS and MMS messaging is used by roughly 4 billion people worldwide. In today’s world of splintered technical ecosystems, it’s rare for a communication technology to be almost universally used. However, that universal acceptance may start to waver depending on how the FCC’s latest ruling is taken.

  Last Friday, the FCC ruled that cellular carriers can block unwanted texts. The FCC and the telecoms say that this is necessary in order to fight spam texts. Opponents of the ruling say that, much like the repeal of net neutrality, gives too much power to the telecoms. Tech blog Gizmodo has even gone as far as to say that we should stop using SMS and MMS texts as the telecoms may start reading and censoring text messages. The problem with using an encrypted messaging system as Gizmodo recommends is that there is no universal app that everyone will switch to since there are competing encrypted messaging services out there.

  Gizmodo seems to be missing a major point in their argument. If you look at the FCC’s rulings since the current administration took over, their moves seem to have been motivated by one factor, money. The blog post’s author seems to have taken a fringe case of allegedly blocked messages by Verizon and turned it into a national conspiracy. If anything, we’re more likely to see a return to limited text messaging. It wasn’t even a decade ago when many cell phone plans were limited to a certain amount of text messaging. If you went over your allotment of texts for the month you’d be charged for each text that exceeded your plan’s monthly amount.

  While we’ve been very critical of the FCC in the past we don’t believe that the FCC is allowing the telecoms to block text to subvert free speech but to further line their already massive pockets.

   
• 

  Geebo 9:02 am on May 16, 2017 Permalink | Reply
  Tags: Android ( 8 ), Netflix ( 15 ), smart phones, tablets ( 3 )   

  Netflix to stop working on certain Android devices 

  

  Video streaming service Netflix is available on just about every modern electronic device known to man. It’s available on laptops, Blu-ray players, video game consoles, smart phones and tablets. Nowadays, you might even be able to stream Netflix on a 1985 Betamax that you found at a thrift store. Netflix recently announced they will no longer support a certain select group of Android devices, and those would be devices that have been rooted by their owners.

  Rooting an Android phone means that you can perform a small hack on the phone in order to be able to have more control over the apps on your phone. Most Android phones come with pre-loaded bloatware that can’t be removed from the device by normal means. When you have an Android phone where storage space is at a premium, sometimes you have to root a phone in order to make space for crucial apps that you may need in your everyday life. This is usually due to the phone manufacturers loading their phones with proprietary apps that many users don’t need or use.

  While not coming right out and saying it, Netflix is giving the impression they’re blocking these devices in order to fight piracy. While that’s well within their right, it feels like their trying to kill flies with a shotgun. The number of people who root their Android devices are a minuscule amount compared to the number of Android users and the majority of them are only rooting their phones and tablets out of convenience, not for piracy.

  By taking this step, Netflix is risking a minor backlash from rooted Android users, but in the long run, Netflix’s numbers are so large they can afford to alienate a number of niche Android users.

   
• 

  Geebo 11:17 am on March 28, 2017 Permalink | Reply
  Tags: Galaxy Note 7 ( 2 ), Samsung ( 4 ), smart phones   

  Samsung to start reselling the explosive Note 7 

  

  You remember the Smasung Galaxy Note 7 don’t you? It was the infamous phone that you couldn’t take aboard any US flight since a fault in the phone’s design would cause some of the phones’ batteries to overheat and burst into flames. Millions of the devices were recalled due to safety risks. Now Samsung says that they have fixed the problem and plan on selling refurbished Note 7s.

  The reason they’re doing this is because it would be an ecological nightmare just to dispose of the phones outright. Instead, Samsung is looking for locales where the government will allow them to see the now supposedly safe devices. Due to the bad press that the phones have gotten, don’t expect those locales to be anywhere in the US or Europe. Reports say that the intended markets for these phones will be Vietnam and India.

  If a refurbished version of the Note 7 were to be re-released in the US would you trust it enough to buy one, or has the press been so bad that the phone would be doomed to fail no matter how much Samsung guarantees it’s safe?

   
• 

  Geebo 11:00 am on February 17, 2017 Permalink | Reply
  Tags: charging, smart phones, usb   

  Be wary of public charging stations 

  

  A lot of us have been there. In the midst of traveling we find ourselves with almost no charge on our phones but we’re nowhere near our destination. Maybe you have a layover or your waiting for a connecting train and you find a public USB charger. You plug your phone in, charge up, then you’re on way without a second thought about it. Well, according to security experts you may want to take that second thought.

  Since most USB cables were not only designed to transfer power but data as well there is a chance that the USB port you just plugged into in public may have just hijacked your phone. This kind of attack can range from stealing your information to seeing everything that you view on your phone.

  That’s not to say there aren’t defenses against these kind of attacks. For example many airports and train stations have battery packs you can rent to charge your phone. You can also buy a USB cable that only transfers power. However, most experts suggest buying a spare battery or battery pack for your phone in advance in order to not run out of juice in the first place.

  Or we could just not be on our devices for every minute of our travels. You’ll never know what you’re missing if we’re all nose down in our screens.