![]() Sounds secure enough right? After all, nobody can possibly know your name. So he just confirmed what I said earlier: to get the needed information to hijack your service, an attacker would only have to call Mint and verify your information. You can only get your account number and pin by calling in and verifying your information. u/rizwank told me to contact /u/MintMobileAlex about this and this is what he said: I contacted /u/MintMobileAlex and /u/rizwankĪsking them about what kind of protection Mint Mobile has against this kind of attack. If they allowed their customers to add an extra security PIN, the attacker would need to know this PIN or the attack would fail. Remember, the attacker just needs your account number and PIN to take over your phone number. Sadly unlike T-Mobile and other carriers, Mint doesn't allow you to add your own security PIN to your account. How is Mint Mobile vulnerable to this kind of attack? Thus, it secures your account against both port-out and SIM swap scams. This PIN will be required to make changes to your account, which includes porting your number to a new carrier or requesting a new SIM card. For example, some carriers like T-Mobile allows you to add a security PIN to your account. ![]() Usually, it's pretty easy to protect yourself against this kind of attack. What if you use your phone number to receive text messages with security codes when you log into your bank account or your email? That person now has access to any code sent to your phone, and can access your email, bank account, credit cards, and other super sensitive info. Everything meant for your eyes or ears is now in the hands of a complete stranger.Īnd your private messages are the least of your worries. Think about it: the hijacker just took control of your phone number, so they’re going to get access to all your calls and texts. ![]() While having your number hijacked and cell service terminated sounds like a headache, the implications are much deeper. Without the proper security measures in place, this person could pretty easily steal your phone number by requesting a SIM replacement activation to Mint or taking it to a new carrier by requesting the account number and PIN of your Mint service, effectively shutting off your phone service and taking control of your number. In case you don't know what that is, imagine someone calling Mint Customer Support pretending to be you. I've been worried about the lack of protection Mint Mobile users have against Port Out Fraud also known as SIM hijack or SIM swap attack.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |