A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Devices

Researchers at the University of Birmingham and security firm Fuzzware tested 26 phones and cellular modules and found that a malicious SIM card can order the device to run attacker commands. On cellular modules in EV chargers, industrial routers, and car telematics, this is enough to take the whole device over.