SIMkorttihyökkäys

SIMkorttihyökkäys, also known as SIM swapping or SIM hijacking, is a type of social engineering fraud where a malicious actor convinces a mobile carrier to transfer the victim's phone number to a SIM card controlled by the attacker. This allows the attacker to intercept calls and text messages sent to the victim's number, including one-time passwords and verification codes used for accessing online accounts.

The process typically begins with the attacker gathering personal information about the victim, often through phishing or data breaches. They then impersonate the victim to the mobile carrier, claiming their SIM card is lost or damaged and needs to be replaced. By providing enough personal details to satisfy the carrier's verification process, the attacker can get the victim's phone number transferred to their own SIM card.

Once the SIM swap is complete, the victim's legitimate phone will likely lose service. The attacker can then use the hijacked phone number to reset passwords for various online services, such as banking, social media, and cryptocurrency exchanges, gaining unauthorized access and potentially stealing funds or sensitive data. Recovering from a SIM swap attack can be a lengthy and complex process, often involving contacting multiple service providers and the mobile carrier to regain control of the phone number and secure accounts. Prevention methods include using strong, unique passwords, enabling two-factor authentication where possible, and being cautious about sharing personal information online.