T-Mobile Sim 'hack'

Hey All (but especially @Logan and anyone who uses T-Mobile),

This may be old news but BEWARE! T-Mobile apparently haphazardly gives out your SIM card to whomever asks.

It seems that someone simply calls T-Mobile and impersonates a T-Mobile employee from a retail store and somehow convinces them to give the SIM card out. Not sure if any of you have more information, or have heard of this, but I wanted the community to be aware.

I know Logan has mentioned he uses them in the past and just wanted to link a video to another video creator who has had this happen to them. I hope it doesn’t happen to the Tek Syndicate members!

Be safe out there.

-Grokas

1 Like

Good old social engineering.

Wouldn't it be interesting if they eventually find out this guy actually works at a tmobile store. I doubt it because I know how poorly these sales reps are trained in security when it comes to consumer data but its a interesting thought.

As users what can we do to defend ourself from this types of attacks?. Because we saw in many cases we cant rely on the vendor/company etc. to protect our data.

Just started watching the video and one of the things he said I knew the reason for, which lead me to a solution that would work. The reason these companies don't give a shit is that they just insure their data for loss. This means that they literally don't give a shit about it. If someone breaks in and steals all their shit then they just file an insurance claim. What we need to do is make that kind of insurance illegal to offer, or use except under very specific circumstances. That why they are fucked as a company if these kinds of leaks happen. I want to see the company practically go under if they let this ship happen. If that's what happens then we won't see this shit any more.

1 Like

That's crazy. Where I live I had to get my father with me (he's the owner of my SIM card because I was underage when I got it) to get a micro SIM to replace my old one and he had to pull out the ID card to verify his identity. I consider what happened to me to be the norm. If someone could steal a SIM card like that some innocent people can get in serious troubles. I would sue the ass out of them if something like that would happen to me.
Also this happened to Boogie2988 with Verizon.

This is the point... they don't.

Yea as the video creator said, the only language they understand is money. So a law suit tends to at least muster a reaction.

Not sure this would be too feasible, despite its merit.

The real fix IMO is to work with the same "social engineering" that @Hate1 mentioned except for the benefit of your security. Try to work with the T-Mobile service department to put further security measures in place. Custom PIN #, or flag your account.

As others have said, I'm not sure exactly what "getting their SIM" means... Could be just the SIM number which @B1gbadwo1f had mentioned as only one piece of several other steps to a full hack , or could be someone with a SIM card reader/writer who is after the ability to impersonate someone's mobile identity.

Who knows. I just wanted everyone to know about it. Especially users of the mobile carrier.

Sounds to me like the ICCID. I don't really know off hand of any malicious uses for this other than cloning.

what I don't get is.. You're on the phone.. they should be able to tell that you're using a different phone or the WRONG number to call. I mean do they even have caller ID?

Also their only security was asking your last 4 digits of your social security or your old phone which is also dumb. Yea my T-Mobile phone was hacked using an note 3. I'm using a Oneplus One. I don't get how they don't noticed it. The phone had it's location disabled too. Now I use 2 factor authentication for google to lock my phone's andriod account.

1 Like