19 November 2017
visit www.atos.net

Hackers exploit SS7 telco flaw to raid German bank accounts

05 May 2017  |  14892 views  |  1 mobile keypad

02 has confirmed that hackers exploited long-known weaknesses in a protocol that connects back-end telco networks to intercept and re-route two-factor verification codes sent by German banks to customer mobiles to authorise online funds transfers.

Weaknesses in the Signaling System 7 (SS7) protocol - which is used for data communications between different telco networks - have been known about since 2014.

Researchers demonstrated that anyone with internal access to a telco can easily log in to third party networks, enabling them to track phones and redirect messages.

O2 in Germany has now confirmed that some customers in Germany have had their accounts drained by hackers after initially falling victim to phishing scams which harvested user names, passwords, phone numbers and bank account details.

The attackers then used SS7 to intercept and redirect mTANs - mobile transaction authentication numbers sent by banks in Germany to authorise transfers out of accounts - to their own phones.

"Criminals carried out an attack from a network of a foreign mobile network operator in the middle of January," 02 told German newspaper Süddeutsche Zeitung. "The attack redirected incoming SMS messages for selected German customers to the attackers."

The news is likely to send a chill down other banks and organisations currently using SMS codes as a customer verification mechanism.

Comments: (1)

A Finextra member
A Finextra member | 31 May, 2017, 19:11

SEVERAL BIG AND IMPORTANT BANKS in BRAZIL use extensive SMS messages as 2nd authetication factor.

Be the first to give this comment the thumbs up 0 thumb ups! (Log in to thumb up)
Comment on this story (membership required)

Finextra news in your inbox

For Finextra's free daily newsletter, breaking news flashes and weekly jobs board: sign up now

Related stories

Financial sector breaches skyrocket in 2016

Financial sector breaches skyrocket in 2016

28 April 2017  |  10788 views  |  0 comments | 20 tweets | 33 linkedin
How hackers took complete control of a legit Brazilian bank

How hackers took complete control of a legit Brazilian bank

05 April 2017  |  12895 views  |  1 comments | 20 tweets | 36 linkedin
Kaspersky records uptick in financial phishing and banking malware

Kaspersky records uptick in financial phishing and banking malware

24 February 2017  |  9034 views  |  0 comments | 6 tweets | 9 linkedin
Turkey's Akbank facing $4m liability after hack

Turkey's Akbank facing $4m liability after hack

16 December 2016  |  14133 views  |  0 comments
Journalists expose NatWest mobile security flaws

Journalists expose NatWest mobile security flaws

04 March 2016  |  14799 views  |  2 comments | 12 tweets | 10 linkedin

Related blogs

Create a blog about this story (membership required)
visit www.vasco.comvisit www.ncr.comvisit www.atos.net

Top topics

Most viewed Most shared
Ripple boss predicts central bank adoption of blockchainRipple boss predicts central bank adoption...
13540 views comments | 21 tweets | 21 linkedin
Singapore central bank open sources blockchain prototypesSingapore central bank open sources blockc...
11856 views comments | 15 tweets | 28 linkedin
Digital receipt startup Flux scores game-changing deal with BarclaysDigital receipt startup Flux scores game-c...
9954 views comments | 20 tweets | 36 linkedin
AmEx partners Ripple and Santander for blockchain-enabled cross-border paymentsAmEx partners Ripple and Santander for blo...
9516 views comments | 13 tweets | 39 linkedin
UK cryptocurrency exchange startup launches debit card for spending bitcoinUK cryptocurrency exchange startup launche...
8028 views comments | 26 tweets | 37 linkedin

Featured job

Competitive base, double ote, benefits
London, UK

Find your next job