SIM swap fraud: A new wave of attacks on financial, online services in Africa

By


In South Africa this type of fraud more than double in the last year, according a report of South African Banking Risk Information Centre (SABRIC)

During Kaspersky Lab’s annual Cyber Security Weekend that took place in Cape Town, South Africa, experts discussed the wide spread growth of mobile payments across the globe and the many cyber risks that surround such technology, especially the recent SIM swap fraud wave, which have become very common in Africa and the wider region.

In South Africa this type of fraud more than double in the last year, according a report of South African Banking Risk Information Centre (SABRIC).

A SIM swap fraud happens when someone convinces your carrier to switch your phone number over to a SIM card that a criminal possesses. In some cases, there are carrier’s employees working together with criminals. By diverting your incoming SMS messages, scammers can easily complete the text-based two-factor authentication checks that protect your most sensitive accounts in financial services, social networks, webmail services and instant messengers.

Many African countries are suited to mobile payment methods. In fact, research  notes that at the end of 2017, there were 135 live mobile money services across the Sub-Saharan African region, with 122 million active accounts.

While payment methods through mobiles offer a convenience that is hard to debate, Kaspersky Lab research shows that mobile payments and the banking system are suffering a wave of attack – mostly powered by SIM swap fraud – and people are losing their money as a result. This type of attack is used to not only steal credentials and capture one-time passwords (OTPs) sent via an SMS, but also to cause financial damage to victims, resetting the accounts on financial services, allowing to the fraudsters access to currency accounts not only in banks but also in fintechs and credit unions.

Fraudsters are also using it as way to steal money using WhatsApp, loading the messages in a new phone, contacting the victim’s contacts asking for money, simulating an emergency situation.

“Despite financial inclusion services prospering, the flip side to this is that it opens up a world of opportunities to cybercriminals and fraudsters who are using the convenience a mobile phone offers to exploit and poke holes in a two-factor authentication processes. Frauds using SIM swap are becoming common in Africa and Middle East, affecting countries like South Africa, Turkey and UAE. Countries like Mozambique have experienced this firsthand. The implemented solution, by banks and mobile operators in Mozambique, as a result, is something I believe we must learn from and encourage other regions to investigate and apply, among other aspects, to mobile payment methods of the future – as a way to ensure that mobile phones do not become an enemy in our pockets,” said Fabio Assolini, Senior Security Researcher of Kaspersky Lab.

The total money lost in the attacks varies by country: there are extreme cases, such as one in the United Arab Emirates, where one victim lost $ 1 million (https://bit.ly/2Yae6l0), while in South Africa one victim reported losing $ 20,000.

“In average fraudsters can steal $2,500 to $3,000 per victim, while the cost to perform the SIM swap starts with $10 to $40,” conclude Assolini.

In order to protect the growing mobile digital life and payment methods, Kaspersky Lab recommends the following key considerations:

Voice and SMS methods avoided as authentication methods for payments – OTPs in mobile apps like Google Authenticator or the use of physical tokens should be used.

Biometrics – there is no better authentication than that of a physical characteristic. Voice authentication is an option that can be investigated further.

An automated ‘Your number will be deactivated’ message – to be shared upon SIM swap request. This will support the user to report the activity, if it is not legitimate, faster.

Activate 2FA on WhatsApp – in an attempt to minimize WhatsApp hijacking, activating Two-factor authentication (https://bit.ly/2vihws7) using a six-digit PIN on your device is critical. This supports the user in having an additional layer of security on the device.

Comments

Post a Comment

Popular posts from this blog

Prostitution; Nigerian Women At Growing Risk From Human Traffickers In Germany.

By
Image
According to InfoMigrants, Nigerian women are at growing risk from traffickers in Germany who exploit and engage them in prostitution. Read the full report below by InfoMigrants. The new prostitute protection law in Germany was meant to identify victims of human trafficking – most of them migrant women. More than 18 months after the law came into effect, thousands continue to be targeted for exploitation, and the risk for Nigerian women seems to be increasing. There are campervans parked by the roadside. Some have hearts painted on them, one says “girls, girls” in red letters. It’s an easy matter for someone to stop for a quick transaction in one of these Love-Mobiles – sex with one of the “girls” in exchange for the going rate. Prostitution is mainly legal in Germany, as are these mobile brothels. But many of the women in the business – including those working from the Love-Mobiles – are victims of illegal human trafficking. Most of the women are from Eastern Europe or Nige...
Read more

FULL TEXT: A sacrifice for our new political order – Ezekwesili

By
Image
“When the ACPN leadership approached me in a series of visits to appeal that I run for office on their platform, the party appeared to be a good fit. It was founded by some disgruntled PDP members some years ago, but when its prime founder decided to return to the PDP, a core of its membership refused to move back with him. I was told that they stayed back because of their opposition to the ways of the PDP. Considering my vocal disapproval of the PDP and the APC, I admired the ACPN’s decision to stand firm and refusal to be co-opted.” It has been an interesting one week since I made the tough but necessary decision to suspend my campaign for the presidency. I have been truly overwhelmed by the reactions to my announcement from Nigerians. Even in airports outside the country as I travelled last week, Nigerians walked up to me with questions, concerns, encouragement, and motivation. I also saw disappointment by some who had poured their hearts and hopes into actualising our mission ...
Read more

Update On Slay Queen Who Was Stripped Naked And Tortured Over Missing Phone.

By
Image
The League of Patriotic Lawyers has given Edo State Commissioner of Police, Mr. Olusegun Odumosu, 24 hours to unravel those behind the torture and insertion of pepper into a girl’s private part in Benin City over alleged stealing of a mobile phone.  Chairman of the platform and former Student Union President of the University of Benin, Mr. Abubakar Yesufu, who said this in a statement yesterday, also urged the state Director, Department of State Services, DSS, to be involved in the investigation. A video of the incident, seen by Vanguard yesterday, showed the girl being stripped naked by a group of people, who inserted pepper into her private parts for allegedly stealing a phone. The unidentified girl was heard crying and saying she didn’t steal any phone, while she was being humiliated by the crowd. Yesufu said: “The League of Patriotic Lawyers has given the Edo State Commissioner of Police 24 hours to arrest and commence prosecution of all the street urchins behind thi...
Read more