topic Re: SIM-swap attacks in Get Support

SIM-swap attacks

mli808080 — Thu, 06 Jan 2022 09:04:35 GMT

What steps is Poblic Mobile taking to protect against SIM-swap attacks?

Re: SIM-swap attacks

Triguy — Fri, 26 Nov 2021 14:13:39 GMT

Here is more information.

https://www.publicmobile.ca/en/on/get-help/articles/sim-swap-fraud

Re: SIM-swap attacks

Dunkman — Fri, 26 Nov 2021 14:26:06 GMT

@mli808080

Public mobile has added two factor authorization for any SIM card changes:

https://productioncommunity.publicmobile.ca/t5/Announcements/SIM-Swap-Fraud-2-factor-authentication/m-p/704175#M51139

It is best to have a secure password to your self service account.

Re: SIM-swap attacks

softech — Fri, 26 Nov 2021 15:09:37 GMT

@mli808080 As mentioned above, the 2 Steps Authentication was introduced to avoid SIM Swap. It does look effective. From Community posts, we see quite a drop in postings in this issue

you got sim-swapped before and worried? or you are just want to know before you join PM?

Re: SIM-swap attacks

BKNS27 — Fri, 26 Nov 2021 16:03:45 GMT

@softech

Or maybe phishing.

Re: SIM-swap attacks

mli808080 — Sat, 27 Nov 2021 23:27:31 GMT

This happened to a friend and I just read an article, which lead me to my question.

Re: SIM-swap attacks

Anonymous — Sat, 27 Nov 2021 23:33:21 GMT

@mli808080 : This has seemed to way reduce the sim-swap frauds. I think there's still a problem with port-outs in specific situations. But that's not your question.

Re: SIM-swap attacks

softech — Sat, 27 Nov 2021 23:48:33 GMT

@mli808080 did it just happen lately? which provider? I think all providers are going the same procedure now as this is required by CRTC

Re: SIM-swap attacks

Korth — Sat, 27 Nov 2021 23:54:54 GMT

The main vulnerability to these attacks is beyond Public Mobile's control. It's people sharing too much of their "personal" and "private" information where anyone else can easily obtain it. It's people using lazy password habits which make their accounts easy to hijack. It's people letting untrustworthy folks access their devices and their data.

Public Mobile really can't do much to "secure" or "protect" customers who have bad habits which attract the attackers.

I'm not saying all the victims are sloppy, lazy, stupid, or naive. Many aren't. Some are exceptionally informed and careful. But those who set themselves up as victims will usually end up becoming victims.