Hack Facebook via SS7

Signalling System Number 7, o common channel signaling system number 7 (SS7), is a set of telephone signal protocols used by most of the world's telephone networks whereby elements of a network exchange information with others in the form of messages.. This protocol was created a long time ago 40 years and is used in current mobile communication networks, For a few years we know that it is not safe and is full of security flaws.

If we add to this problem that social networks are the target of millions of hackers around the world, Not only because of the amount of information they offer about users and entities, but also because they are easy victims of sabotage, we have the explosive mixture prepared for our data to be distributed by any cyberspace criminal and how could it be otherwise the famous social network created by Mark Zuckerberg is once again in the eye of the hurricane.

Hackers access the system, redirecting messages and calls to your devices thus intercepting the information. When Facebook is linked to your mobile phone, They can have access to the entire network just by knowing your phone contact. To access the victim's profile, The cybercriminal will click on the forgotten password option, by which, and after verifying the phone number, The social network sends a new key in the form of SMS. This message has already been previously redirected to the attacker's mobile, so you can already access the victim's session.

The main problem with the SS7 protocol is that it is not possible to patch this vulnerability in a short period of time.. When the problem arises from the communications network itself and not from Facebook, Users can do nothing but take a series of precautions. The main and most radical would be not to link the phone number to a social network such as Facebook or Instagram., Using email as a two-factor authentication method to recover the password, and not sending sms.

Leave a Reply

Your email address will not be published. Required fields are marked *

Intec Cybersecurity
Intec Cybersecurity
intec cybersecurity