CATana: On the Dangers of SIM-Originating AT Commands
Hostile SIMs have been discussed as an attack vector against Mobile Equipment (ME) connected to cellular networks. One main attack path are proactive commands sent from the SIM to the victim device. In this work, we examine the threats posed by the RUN AT command which are SIM-originating requests for the ME to execute a specified AT command, effectively creating a SIM AT interface:
https://www.usenix.org/conference/woot26/presentation/lisowski
August 12, 2026 356 1
