SIM Card Swap (T1451)

View on ATT&CK

In Playbook

Technique & Subtechniques

  • SIM Card Swap

Associated Tactics

  • Network Effects

Network Effects (TA0038)

The adversary is trying to intercept or manipulate network traffic to or from a device. This category refers to network-based techniques that an adversary may be able to use to fulfill his or her objectives without access to the mobile device itself. These include techniques to intercept or manipulate network traffic to and from the mobile device.

View on ATT&CK

Procedure Examples

Description Source(s)
Alex Cambell. (2016, February 12). Everything you need to know about SIM swap scams. Retrieved December 12, 2016. Betanews-Simswap
Brian Krebs. (2018, May 18). T-Mobile Employee Made Unauthorized ‘SIM Swap’ to Steal Instagram Account. Retrieved November 8, 2018. Krebs-SimSwap
John Biggs. (2017, August 23). I was hacked. Retrieved November 8, 2018. TechCrunch-SimSwap
Lorenzo Franceschi-Bicchierai. (2018, August 3). How Criminals Recruit Telecom Employees to Help Them Hijack SIM Cards. Retrieved August 11, 2018. Motherboard-Simswap2
Lorenzo Franceschi-Bicchierai. (2018, July 17). The SIM Hijackers. Retrieved August 11, 2018. Motherboard-Simswap1
Miles Brignall. (2016, April 16). Sim-swap fraud claims another mobile banking victim. Retrieved December 12, 2016. Guardian-Simswap
New York Department of State. (2016, February 12). AT&T SIM-Card Switch Scam. Retrieved August 23, 2016. NYGov-Simswap
NIST Mobile Threat Catalogue