There is mention of fake antenna but I don't think they cover entire country with that, how do they do?
There is mention of fake antenna but I don't think they cover entire country with that, how do they do?
The SMS are intercepted because thru SS7 by tricking the network into thinking the target phone is roaming (3).
(1)https://www.lighthousereports.com/methodology/surveillance-s...
(2)https://www.motherjones.com/politics/2025/10/firstwap-altami...
(3)https://www.fyno.io/blog/is-it-easy-to-intercept-sms-a-compl...
For anyone worried, this approach:
1) Breaks the existing phone from receiving WhatsApp messages, so you can notice that behavior
2) Can be prevented by setting up a WhatsApp pin in your settings
Horrifying that nearly banks still require you to use sms as a 2fa and do not offer any other alternative.
Did you really think the US Gov was OK with facebook running the biggest "encrypted" SMS system on earth. LOL of course they already had access to all the messages.
In my country banking applications are tied to your phone via IMEI, SIM and other hardware dependent information available.
Forget getting banking details and use another device without the user knowing, either.
If someone clones your SIM or gets a replacement in behalf of you, your all banking access is blocked until you enable them one by one with your ID card or other means.
One of the banks can use FaceID as a secondary factor, too.
So, other methods are possible. It's an "implementation detail" at this point.
This article answers none of my questions!
https://www.lighthousereports.com/methodology/surveillance-s...