
British Researchers Demonstrate "Spec-Compliant" Attack Where SIM Cards Hijack Smartphones
RUN AT COMMAND, which lets a SIM card send AT commands directly to a device's modem, is a legitimate feature of telecom standards that has carried forward modem control commands designed in 1981 for over 40 years. An attack demonstrated by a research team at the University of Birmingham across 26 devices exposes a new attack surface that traditional threat models fail to detect—precisely because it complies with the specification.








