I use to hack telephone networks for fun back in the early 80s but assumed they had been made far more secure by now, apparently not.
The issue it seems is the SS7 protocol which was developed in 1975 before the internet was around is still used extensively, this suggests it's time for an upgrade but that will be a massive, probably world wide, task.
The only positive aspect is that this is a sophisticated attack requiring considerable technical and system knowledge and would probably only be worth doing if you are sure there is going to be a bucket of cash at the other end.
The Optus attack finally made me get off my bottom and shift a large chunk of cash I had in an internet accessible account to an account which I have to go into a branch to access, inconvenient for sure but I'll only need to do so once a year or so and it *cannot* be hacked now.
A few years past I did some consultancy work on the vulnerability to hacking of certain building management systems; over the past 20 years these system have been made internet capable because it was simple, sexy and a good selling point but no one gave the slightest bloody consideration to security. A 100 story building may well have a few thousand people in it and if you can control the major environmental, transport and safety systems of that building you can do a *lot* of damage and create massive cost. The proverbial kid in the back bedroom could probably hack into most of them.
We have created this massive on-line world without thinking it through beforehand and are now paying the price.
https://www.medibank.com.au/livebetter/newsroom/post/medibank-cyber-incident
Yesterday (13 Oct) the Medibank Group detected unusual activity on its network.
In response to this event, Medibank took immediate steps to contain the incident, and engaged specialised cyber security firms.
At this stage there is no evidence that any sensitive data, including customer data, has been accessed.
-- Edited by dorian on Saturday 15th of October 2022 03:17:44 AM
AFP classified documents hacked in data leak, exposing agents fighting drug cartels
https://www.abc.net.au/news/2022-10-14/afp-data-leak-hackers-expose-drug-cartel-information/101535312
I wonder how many leaks ASIO (Another Secret Is Out) has had.
www.abc.net.au/news/2022-10-15/woolworths-group-mydeal-data-breach/101539426
I mistakenly thought this was safe ...
This is why you shouldnt use texts for two-factor authentication:
https://www.theverge.com/2017/9/18/16328172/sms-two-factor-authentication-hack-password-bitcoin
Thanks for that Dorian, very interesting.
I use to hack telephone networks for fun back in the early 80s but assumed they had been made far more secure by now, apparently not.
The issue it seems is the SS7 protocol which was developed in 1975 before the internet was around is still used extensively, this suggests it's time for an upgrade but that will be a massive, probably world wide, task.
The only positive aspect is that this is a sophisticated attack requiring considerable technical and system knowledge and would probably only be worth doing if you are sure there is going to be a bucket of cash at the other end.
The Optus attack finally made me get off my bottom and shift a large chunk of cash I had in an internet accessible account to an account which I have to go into a branch to access, inconvenient for sure but I'll only need to do so once a year or so and it *cannot* be hacked now.
A few years past I did some consultancy work on the vulnerability to hacking of certain building management systems; over the past 20 years these system have been made internet capable because it was simple, sexy and a good selling point but no one gave the slightest bloody consideration to security. A 100 story building may well have a few thousand people in it and if you can control the major environmental, transport and safety systems of that building you can do a *lot* of damage and create massive cost. The proverbial kid in the back bedroom could probably hack into most of them.
We have created this massive on-line world without thinking it through beforehand and are now paying the price.