AdaptiveMobile Security Simjacker Technical Paper 01


Figure 12: Countries Actively using ST Browser with no-security level set



Download 3.33 Mb.
View original pdf
Page19/29
Date20.12.2023
Size3.33 Mb.
#62999
1   ...   15   16   17   18   19   20   21   22   ...   29
SimJacker
SIM-Swapping
Figure 12: Countries Actively using ST Browser with no-security level set
The cumulative population of these ST Browser-using Countries came to 1.02 Billion. This is not a number of affected devices/SIM Cards, but unfortunately it is quite difficult to determine the number of affected SIM cards. There are several variables which would determine whether the actual number of affected devices is lower or higher than this. Lower
• Not every operator in the country may use this technology. In followup analysis, based on the preceding method, we used numbering plans to identify the individual operators within these countries sending the ST Browser type messages, and then count reported subscriber numbers of those operators. This varies by country and region. From our analysis we could identify 61 Mobile Operators (excluding MVNOs) in the 29 countries that use this technology. Based on public reported information the cumulative subscriber numbers of these ST Browser-using Operators comes to

861 million mobile connections
(SIM cards.
• Not all SIM cards in the operator may use this technology. In discussions with a few operators in the LATAM region we were informed that the majority of SIM Cards
(>90%) in their network had it. But in other operators it might not be this high and Based on UN Population estimates 2019


29
Simjacker Technical Report
©2019 AdaptiveMobile Security maybe used by legacy devices only, so it would be a much lower percentage. Only the individual Mobile Operators can provide this specific detail, although in some cases they may not have this information readily to hand. Higher
• There are countries operators using the technology which we did not observe directly. This is because our search was based on aside effect of looking for attacks on users, not looking for ordinary activity. Also, more importantly, if there is no roaming between a ST Browser-using operator and the roamed-to operator where the measurement took place in, then we would not observe any activity from that ST Browser-using operator. In theory, if we were to assume all Operators in a ST
Browser-using Country also used the technology, and we were to take total connection numbers
6
within the country this comes to
1124 million mobile


Download 3.33 Mb.

Share with your friends:
1   ...   15   16   17   18   19   20   21   22   ...   29




The database is protected by copyright ©ininet.org 2024
send message

    Main page