Port-out hijacking: A how-to for protecting yourself against SIM card swap attacks

[Redaktion]

So many people rely on mobile devices of all stripes to keep their data secure. Let's look at why this is not such a good idea - and the options available to fight back.

https://www.notebookcheck.net/Port-out-hijacking-A-how-to-for-protecting-yourself-against-SIM-card-swap-attacks.862940.0.html

[Bizarro_NikoB]

It's almost as if storing everything in the cloud and companies/govts forcing everyone to use their cell phone for transactions, id verification, etc. while also storing customer data in the cloud wasn't such a smart idea after all.

I've often said the internet will eventually be remembered as one of the worst inventions of our time and one of those things that contributed to a civilization in decline.

[George]

I'm sorry but what a bunch of nonsense!!!

So the lessens learned here are:

- DON'T store account access information on your mobile device and if you do...

- DON'T USE ANY "Backup" feature where this information can be restored to a NEW device (unless you are actually SWAPPING devices and then remove/delete the backup once the swap is complete so it is ERASED from the providers servers)

- DON'T use questionable providers that don't insist on multifacter authentication that include BIOMETRIC's and PREFERABLY a IN PERSON visit to their store with lots & lots of authentication.

- DON'T splatter the answers to security information/questions across the WEB and on social media sites.

So sure if your device legitimately suffers a premature death it WILL be a royal PITA to regain access to your accounts on your device again, as IT SHOULD BE.

The GOOD NEWS it will be nary IMPOSSIBLE for crooks to do the same as they will only have gained access to your PHONE NUMBER.

While I MAY be LUCKY I've never had a device fail on me and a self security assessment indicated that allowing my device to 'back up' to the CLOUD (via the provider or other means) was a MUCH GREATER RISK then not having a backup available at all. :)

Google & Apple (among others) store backups (including account & logon information) for countless customers.

YMMV.