DEF CON Safe Mode Crypto and Privacy Village - Per Thorsheim - Hacking like Paris Hilton

Simswap attacks has increased in recent years, with several high-profile cases in the media showing very fast & effective ways of duping people or getting access to valuable accounts . All the way back in 2006 Paris Hilton got accused of hacking into the voicemail of Lindsay Lohan, while similar scandals has been observed since then in other countries as well.

Asking around in my home country of Norway, neither simswap attacks or voicemail hacking seemed to be known among most infosec people, or at least not part of anyone's risk analysis. So I decided to take a closer look.

The results were shocking at many levels, from technical levels to political decisions & apathy. Several million customers of 3 different carriers in 3 countries were exposed to potential voicemail hacking for up to 13 years. A fake business card was enough to do a simswap & hijack the number of a famous female blogger, while credential stuffing against a mobile carrier allowed for account hijacking of women who used SMS 2FA with their accounts at various services.

This talk will explain what I found, what I did, and how it changed carriers, government agencies, politics & law.

[daniellelyda]

HACKERPHIBER VIA IG, HE IS MY LIFE SAVER AND I CANT IMAGINE MY LIFE WITHOUT HIM

[sundhaug]

Re 6:54: When Per says "minister" he means as in government minister, in this case "Secretary/minister of fishing/fisheries"

[reneejenniffer]

Am so glad I joined your bitcoin investment deals, because everything worked out fine and i just got 1.9btc into my blockchain ..