Switch to eSIMs for more security and cost savings

In my previous post eSIMs save you money during travels I explained how eSIMs are cheaper and more convenient than purchasing physical SIMs. Did you know eSIMs also offer greater security? You should switch to an eSIM even when you are not traveling overseas.

Physical SIMs are vulnerable to SIM swapping. This is where threat actors transfer a victim’s phone number to their SIM card, which allows them to intercept one-time passcodes sent via SMS, giving them the final key needed to bypass multi-factor authentication and access sensitive financial or personal information.

How is SIM swapping executed?

You may be inclined to think it's done via some zero-day vulnerability on your phone, but it is actually done via social engineering.

Social engineering is the art of manipulation. It exploits people into divulging confidential information or performing actions that benefit the attacker. Psychological principles like trust, fear, urgency, and curiosity are all fundamental to an attack of this kind to work. SIM swapping involves social engineering of your carrier's customer support instead of you. Traditional social engineering tactics that involve you directly may involve an email trying to manipulate you into opening malware contained in an attached file which basically ‘opens the door from the inside’ for the attacker.

SIM Cloning vs. SIM Swapping

Most people who think they’ve been "cloned" have actually been SIM swapped. This has nothing to do with the technology of the SIM/eSIM and everything to do with the carrier's customer service being social engineered.