Cat-Go-Purrrrrrr on Nostr: "the attacks require control of the #SIM itself. That could come through compromised ...

"the attacks require control of the #SIM itself. That could come through compromised SIM software, physical tampering, abuse of remote administration by a malicious or breached operator, or supply chain shenanigans.

The researchers also found that vulnerable versions of Android allowed a hostile SIM to invoke the standardized LAUNCH BROWSER command and open an attacker-controlled website without user interaction, even while the phone was locked. Google tracked the flaw as CVE-2025-48618 and patched Android 13 through 16 in December 2025."

quoting
nevent1q…83rf

Malicious SIMs can shut down phones, steal files, and drag 5G back to 2G https://www.theregister.com/security/2026/08/11/malicious-sims-can-shut-down-phones-steal-files-and-drag-5g-back-to-2g/5285482 #news #security