Revelations continue regarding the breach of Gemalto by the NSA and GCHQ, resulting in them gaining access to SIM card encryption keys.
According to The Intercept , a British agency monitored the email and Facebook accounts of the company's employees to determine which of them were responsible for sending the SIM card encryption codes
Gemalto sends these codes to its mobile phone providers [more than 450 worldwide] via the Internet . GCHQ intercepted and intercepted the data from the online code transmissions. In this way, it stored PIN codes for thousands of – possibly – cards and had them available for future use.
What is interesting is the way in which GCHQ managed to interfere with the missions and, above all, how it learned who its hackers should target.
GCHQ first gained access to employees' emails in a previously unknown way. It then scanned the emails to try to identify, through private Facebook, which employees were responsible for sending the encryption codes for the SIM cards. After identifying the responsible employees through their Facebook profiles, GCHQ now knew who to target to steal the PINs.
Source: gr.pcmag.com
