Dont Trust That Text Message: Tool Simplifies iOS SMS-Spoofing

Known SMS flaw isnt in the phone itself, however

A French researcher has unleashed a free tool that exploits a weakness he recently highlighted in the SMS feature of Apples iOS that could allow an attacker to spoof the sender of a text message.
The new tool, created by researcher pod2g, basically lets an attacker send a text message that appears to be from someone you know or trust -- such as your bank.
But the vulnerability isnt in the smartphone itself, says Errata Security CTO David Maynor; rather, its in the network transporting the SMS messages. And there are already services available, such as
SMSGangs Spoof SMS Service
, that provide spoofing, Maynor says. The new tool just automates SMS-spoofing, he says.
Its a network problem, Maynor says of the issue. Even so, phone manufacturers could add some protections for this attack that help prevent malicious activity at the User Data Header (UDH) used in SMS, he says.
Even with the new tool from pod2g and the attention it attracted, its unlikely that this type of attack would become widespread unless its automated, Maynor says. Until someone figures out a way to automate and monetize this and have bots doing it, youre not going to see a lot of use of it in the wild, he says.
Apple did not respond today to a media query on the development, but last week
reportedly told Engadget
that one limitation of SMS is that messages can be spoofed, and noted that its iMessage service verifies text-message addresses.
Apple takes security very seriously. When using iMessage instead of SMS, addresses are verified which protects against these kinds of spoofing attacks. One of the limitations of SMS is that it allows messages to be sent with spoofed addresses to any phone, so we urge customers to be extremely careful if theyre directed to an unknown website or address over SMS, an Apple representative said.
Pod2g says the protocol description unit (PDU) is the format that an SMS message gets converted into when its sent to the baseband; it then delivers it to the recipient.
In the text payload, a section called UDH (User Data Header) is optional but defines lot of advanced features not all mobiles are compatible with. One of these options enables the user to change the reply address of the text. If the destination mobile is compatible with it, and if the receiver tries to answer to the text, he will not respond to the original number, but to the specified one, pod2g said in
a blog post
about the vulnerability. Most carriers dont check this part of the message, which means one can write whatever he wants in this section: a special number like 911, or the number of somebody else.
Pod2g considers the flaw -- which he says is in all versions of iOS, including iOS 6 beta 4 -- to be severe. Apple: please fix before the final release, he said.
Weaknesses in SMS are nothing new. Renowned Apple researcher Charlie Miller, for instance,
at Black Hat USA 2009 demonstrated an SMS texting bug in the iPhone
that let an attacker take over a victims phone just by sending a text message.
Have a comment on this story? Please click Add Your Comment below. If youd like to contact
Dark Readings
editors directly,
send us a message
.

Last News
▸ Beware EMV may not fully protect against skilled thieves. ◂ Discovered: 23/12/2024 Category: security	▸ Hack Your Hotel Room ◂ Discovered: 23/12/2024 Category: security	▸ Website hacks happened during World Cup final. ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Dont Trust That Text Message: Tool Simplifies iOS SMS-Spoofing