Hello everyone, what do you think about the SS7 attack to compromise OTP?
Is it functional today?
Is it functional today?
ss7 attack |
 (May 26, 2025 01:41 PM)taitotikarotikaro Wrote: Hello everyone, what do you think about the SS7 attack to compromise OTP? sure, in regions with less secure telecom infrastructure maybe... (May 26, 2025 01:46 PM)putnik1313 Wrote: sure, in regions with less secure telecom infrastructure maybe... Is it possible in the United States? (May 26, 2025 01:51 PM)taitotikarotikaro Wrote: Is it possible in the United States? try it, then let me know...  (May 26, 2025 01:51 PM)taitotikarotikaro Wrote: Is it possible in the United States? It might be, with like 3G/4G and the target IMEI. But it won't be easy, and you will have to pay a large bribe. (May 26, 2025 01:46 PM)putnik1313 Wrote: sure, in regions with less secure telecom infrastructure maybe... how can i find low secure telecoms?
Jun 11, 2025 11:16 PM
(This post was last modified: Jun 12, 2025 12:11 AM by Bastille.)
please refer here for more info and carry easy backup [deleted]
SS7-based OTP interception attacks are still functional today, though they’ve become harder to pull off due to increased awareness and improved defenses by mobile network operators.
The SS7 protocol—originally designed without strong authentication—remains in use globally, especially in legacy 2G and 3G networks. Attackers who gain access to SS7 networks (often through rogue telecom operators or compromised infrastructure) can still exploit it to intercept SMS messages, including OTPs. A 2025 white paper from iBASIS confirms that SS7 vulnerabilities remain widespread, and OTP interception is still a real threat. That said, many operators have started deploying signaling firewalls, penetration testing, and defense-in-depth strategies to detect and block suspicious SS7 activity. But the protocol’s fundamental design flaws mean that complete mitigation is difficult without fully phasing out SS7-based systems |
|
|
