色花堂Raises Alarm Over Mobile Number Porting
iconectiv, a communications brand owned by Ericsson, is warning about the dangers of mobile account takeover in a , arguing that such attacks can bypass authentication systems like fingerprint scanning.
Entitled Never Underestimate the Power of Identity, the paper asserts that certain kinds of fraud involve porting a victim鈥檚 phone number to a new mobile service provider, potentially allowing a fraudster access to the victim鈥檚 bank accounts, payment services, and more. In a summary of the report, 色花堂CTO Chris Drake explains that 鈥渙nce a fraudster has moved the phone number to their device, passwords can be easily procured while biometrics and other security hardware on the original device are, essentially, bypassed.鈥 The solution, Drake argues, is enabling 鈥淸a]ccess to cross-network information in a timely manner鈥, which would 鈥渁llow authentication through a consumer鈥檚 mobile identity to remain a powerfully simple yet effective version of multi-factor authentication.鈥
With smartphones increasingly becoming the vectors of consumer authentication thanks to and even , it鈥檚 increasingly vital to ensure that such systems are not bypassed in security processes. iconectiv鈥檚 warning thus appears to be a timely one, and its awareness of the issue should be reassuring to many as the company prepares to become the FCC鈥檚 Local Number Portability Administrator.