Cyber Risks · Krebs on Security

Is Your Voicemail Wide Open?

Summary: Krebs on Security reports that the U.K. phone-hacking scandal involved alleged intrusions into the voicemail boxes of celebrities and 9/11 victims, and that many wireless providers rely on caller ID to verify voicemail access rather than requiring a PIN. Using the caller ID spoofing service Spooftel, Krebs called his wife's AT&T iPhone, pressed the # sign, and reached her saved messages without a password; The Boston Globe reported Sprint and T-Mobile also did not require a PIN, while Verizon did.

Why it matters: The FBI is investigating whether News Corp. employees hacked the voicemail boxes of 9/11 victims, and the access method required nothing more than a spoofed caller ID and a phone that had never set a voicemail PIN.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related