SIM Swapping

14th January 2020 | Cybrary SIM Swapping


SIM Swapping cyber security

SIM Swapping is a term used when hackers steal a victims phone number and port or switch that number to a different SIM card in a different cell phone in a hacker’s possession. When the hacker has control of the phone number, they are able to gain access to emails, social media accounts, and even cryptocurrency accounts that are normally protected by SMS-based 2-factor authentication. 

SIM Swapping typically occurs through social engineering, the act of manipulating people who have access to the SIM card technology into switching that SIM card to their own device for malicious purposes.  Other times, hackers just outright bribe a sales agent at a cell phone carrier store with cash payments to make the swap.

This is why NIST has deprecated SMS two-factor from the list of preferred methods to accomplish two-factor.  It is simply too easily compromised.  That leaves the physical tokens (securID, Yubikey as examples) and software solutions such as Google Authenticator, Microsoft Authenticator and others as preferred methods.

Related Term: Remote Desktop Protocol (RDP), Social Engineering

Related Readings:  CyberHoot Blog: A Deep Dive into SIM Swapping

To learn more about SIM Swapping, watch this short video:

Latest Blogs

Stay sharp with the latest security insights

Discover and share the latest cybersecurity trends, tips and best practices – alongside new threats to watch out for.

Your WiFi Might Be Watching You… Sort Of

Your WiFi Might Be Watching You… Sort Of

As smart homes get smarter, so do their habits of watching, sensing, and reporting. Enter WiFi Motion Detection, a...

Read more
184 Million Passwords Leaked: Is Your Digital Doppelgänger Out There?

184 Million Passwords Leaked: Is Your Digital Doppelgänger Out There?

Spoiler alert: If you’re still using “password123” or “iloveyou” for your login… it’s time for an...

Read more
CyberHoot Newsletter – June 2025

CyberHoot Newsletter – June 2025

CyberHoot June Newsletter: Stay Informed, Stay Secure Welcome to the June edition of CyberHoot’s newsletter,...

Read more