frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

NYC Telecom Raid: What's Up with Those Weird SIM Banks?

https://tedium.co/2025/09/23/secret-service-raid-sim-bank-telecom-hardware/
112•coloneltcb•3h ago

Comments

leakycap•3h ago
Such a cool write-up, I enjoyed the screenshots of the admin interfaces ... which look exactly as bad as I'd hoped

Sad to see Mobile-X MVNO as the preferred SIM in the photos shown, but I wonder if an MVNO has local-level data to detect a situation like this when hundreds of phones are in one area and don't move. Postpaid carriers running their own network might easily connect the dots between SIM/accounts/phone towers... but the piggyback nature of MVNO network management probably makes even detecting this behavior even harder.

rr808•2h ago
Damn Mobile-X I hadn't heard of them but looks like a good deal. Maybe this is actually a marketing exercise?
leakycap•32m ago
Tello isn't quite as cheap as Mobile-X, but for low use it is also great https://tello.com/buy/custom_plans

If you use an Apple Watch cellular, Verizon's Visible seems to be the best price currently but sadly doesn't have a pay-for-use option.

mike_d•1h ago
> I wonder if an MVNO has local-level data to detect a situation like this when hundreds of phones are in one area and don't move

MVNOs don't care because they collect the profit without having to deal with any of the network issues. The carriers in turn only care when it impacts performance for legitimate customers, as they also see a piece of the pie.

leakycap•33m ago
> MVNOs don't care

This is an excellent point

I assumed there would be anti-fraud measures blocking this kind of activity, but if this is a paying customer it isn't necessarily fraud/bad to the carrier or mvno

Scoundreller•3h ago
Maybe weird hardware, but easily available on aliexpress. Y’all need to explore more. Appears to be scrubbed off now but used to be more available.

Tbh, contraptions like this have a long history for gray-market VoIP call termination, but usually in countries where governments charge a lot for incoming international calls as means of fund-raising (or inefficient telecoms) but domestic rates are low.

Merge with https://news.ycombinator.com/item?id=45353925 ?

mac-attack•3h ago
At what point does an article shift from giving insights -> giving a step by step to start your own spam farm?

Praising the device and stating how cool it is? Highlighting how inexpensive it is? Screenshots of how it works? Saying where you can buy it from?

The line is blurry but this article has all of that. Here's to responsible journalism and being inundated with more spam on my phone so that a newsletter gets more clicks.

gruez•2h ago
The author probably turned up everything in the article by searching on google so it's probably not helping anyone unless they want to turn to the dark side right this second
mac-attack•1h ago
I can do a google search for ghost guns too, but once I compile my information and it goes viral on an unrelated site, isn't that still contributing to the visibility (and potentially distribution) of ghost guns?
otterley•13m ago
So what's the solution? Prohibit talking about the subject? That doesn't seem like the right answer, not to mention it would run afoul of the First Amendment.
SchemaLoad•2h ago
I doubt a random blog post is enabling this. If you are at the point of dropping thousands of dollars on a spam farm you've got the ability to find this stuff yourself. If anything it's highlighting how this stuff works to the average person.

This problem isn't going to be solved by making information about the devices more obscure. It's going to be solved by technical preventions and legal action against the senders.

mac-attack•1h ago
I do not think that the blog is the reason why the practice exists. I am stating that the blog's framing of the issue is a counter-productive way to cover an illegal activity that 99% of citizens actually hate.
neuroelectron•3h ago
This guy claims that it's not that suspicious and not a state-backed operation.

https://x.com/ErrataRob/status/1970586083374112784

is_true•2h ago
I thought it was someone running a mobile ip proxy
dilyevsky•2h ago
"residential" proxies, ad clickbots, instagram/twitter bots - lots of "legit" use-cases these days
AnotherGoodName•2h ago
Can’t read it since I don’t have a login there but i’m guessing they buy sims from all over the country and sms on matching prefixes since people will assume a local number is less likely to be spam.

This explains using such a bank. You want to cover as many prefixes as possible and you can’t match area codes with traditional sms services.

motoboi•2h ago
You don't need a login to read a single tweet.
AnotherGoodName•2h ago
Thanks! I was assuming it was a chain with more details than i saw there.
edoceo•2h ago
Twitter is inconsistent for me. From the mobile (FF, not authenticated) it's blocked but from desktop (FF, not authenticated) is visible.
jghn•2h ago
You can also see his takes on bsky [1] or h blog he posted there [2]

[1] https://bsky.app/profile/erratarob.bsky.social [2] https://cybersect.substack.com/p/that-secret-service-sim-far...

AnotherGoodName•2h ago
The second link there is much more meaningful.

I actually did see the tweet in full it turns out. It's just that there's not much content so i figured "oh it's one of those twitter thread chains i can't read".

therein•51m ago
Good post, also they use Quectel because it allows changing IMEI with a single AT command.
perching_aix•1h ago
These days the way to go is social media proxies. A popular one is xcancel. Just replace the x in the domain with xcancel and you'll land on a proxy site (somebody's Nitter instance to be specific): https://xcancel.com/ErrataRob/status/1970586083374112784

Still not gonna help if you have cookies disabled because of the rate limiting, but hey.

dmd•1h ago
I love how spammers do that- it works out great for me. I no longer live in my phones area code. I block the entire area code, which catches a huge amount of spam calls.
IG_Semmelweiss•12m ago
this is a required hack, for any founder

SO much value in being able to root out garbage sales calls

mike_d•1h ago
I am very familiar with the hardware being used in that operation and Rob is 100% correct.

Someone used an online SMS service to send threatening messages to a member of the Gleichschaltung squad, and the secret service traced the SIM card back to one of these rented apartments. The reason it was linked to a "Chinese state sponsored blah blah blah" is because most Chinese criminal operations in the US have some indirect benefit to the Chinese government, which is why they are allowed to operate.

You could use this hardware to launch some sort of a flooding attack, but given the density all you are going to knock out is the one cell site all your devices are talking to. If China wanted to knock out cell service around the UN they would use the hundreds of thousands of backdoored Android phones in New York to launch a more distributed attack.

JackFr•42m ago
I not familiar with any of it, so I’m willing to take your word, but doesn’t the scope raise some eyebrows?

Using the prices quoted in TFA they’re talking about $900,000 in servers and another $500,000 in SIM cards, before labor, rent and electricity.

Is that sort of outlay typical for phone scammers.

Also on a technical note is there an advantage to having all your sites in the NYC area? Is it simply that there’s enough cell traffic, the bad actors illicit traffic won’t stand out?

rootsudo•46s ago
No way, whatever the sim hardware cost is and the sim service per month for the carrier.

NYC is just high density, remember cell means cellular so the towers are configured for high traffic and more fall back, also being easy to go around in general, airports etc

Esims go for $5-10 a month. Hardware is less than 20k max. Apartment and general utilities are a sunk cost.

d--b•49m ago
Yeah thanks, that makes more sense. The devices probably are in New York because of the high antenna density which makes it easier to actually not jam the cell towers.

The secret service spun it as a terror threat in the same way your orthopedist tells you your teeth problem comes from bad posture.

I mean, the thing might be used to jam the networks (one would have to check that the devices still work when using all the antennas simultaneously), but that really sounds like an awful lot of effort for a disruption that’s neither guaranteed nor that distuptive. I mean, this would create some chaos for sure, but law enforcement and emergency services use radio to communicate. 99% of businessses use wired phones. So this would mostly affect what? deliveries?

A large scale spam operation is way more plaisible.

That the secret service is directly under Trump may also explain why they spun it as potential terrorism stuff. it’s part of their effort to make people believe that America is under terror threat, so that they can legitimize power grabbing…

daft_pink•2h ago
“One has to wonder if the rise of eSIMs is designed to make these products obsolete.“ or significantly reduce their labor costs.

I think this explains why the spam texts I receive never show up as an iMessage or rcs. This thing-a-ma-hugger doesn’t support it.

SchemaLoad•2h ago
This seems like a pretty far fetched idea that phone manufacturers are pushing for esim to enable spammers to spam easier, rather than to free up space in phones for a bigger battery.
mike_d•1h ago
> phone manufacturers are pushing for esim [...] rather than to free up space in phones for a bigger battery.

It is being pushed by the carriers because retail locations are their biggest overhead expense, for what is basically a place to go pick up a SIM card.

SchemaLoad•55m ago
Carriers are the slowest ones in the process though. Apple has had to drag them kicking and screaming on esim. Physical sims can be purchased in every supermarket. I'd guess the retail stores mostly exist for marketing and selling boomers on overpriced long term plans.
BobbyTables2•48m ago
Agree.

Was never much a fan of eSIMs, but after seeing them in action, I kinda like it. Saved me inconvenient trips and delay.

Yes, it’d be nice to just be able to move a sim from one device to the next. In practice, I’ve only done that a few times in the past 20 years, about as often as I switch carriers. So, kinda a wash.

Hoping if phone suddenly breaks, can get new eSIM as easily.

crtasm•2h ago
I'm not sure it's viable to run large amounts of iMessage accounts, e.g. looking at https://bluebubbles.app/faq/ it needs a running MacOS machine/VM to work.
crazygringo•2h ago
For context, the original story from earlier today:

Cache of devices capable of crashing cell network is found in NYC (263 points, 251 comments)

https://news.ycombinator.com/item?id=45345514

1oooqooq•1h ago
oh that's why google have been silently banning all corporations using gvoice unless they email support for each number to be manually checked for compliance.

it's been a few interesting couple months at work, as google being google there was never an announcement or anything.

est•1h ago
the Chinese term for "SIM bank" is 猫池 (Modem pool)

it's mostly used to spam SMS and make fraud calls

smoovb•50m ago
The Secret Service is being overly alarmist, but to a hammer, everything looks like a nail.

“We need to do forensics on 100,000 cell phones, essentially all the phone calls, all the text messages, anything to do with communications, see where those numbers end up,” "You can’t text message, you can’t use your cell phone. And if you coupled that with some sort of other event associated with UNGA, you know, use your imagination there, it could be catastrophic to the city."

So until we do our jobs, imagine the worst case scenario. Thanks guys.

Could be rent US a number service, data roaming, VOIP or SMS termination, account registration (google, tiktok, whatsapp).

There are data roaming services that use 5G GSM modems to transfer the SIMs tower connection to pocket wifi devices for tourists who need data.

otterley•15m ago
I suspect the Secret Service is keeping some cards (ahem) close to their chest. It's not difficult to believe that there is other evidence they chose not to publish that distinguishes a garden-variety spamming operation and one that is more nefarious.
mrheosuper•50m ago
I used to have a machine that look like this(A bit smaller tho).

My machine was for...spamming text sms. We would put it on our vehicle and drive around the city to spam sms message.

We stop doing that now since it's not really effective anymore.

But our machine having same form factor does not mean they have same functionality.

peterldowns•6m ago
How did that work economically? Who paid for you to do that and how was it worth it for them to do so?
VladVladikoff•48m ago
How can you have that many mobile radios in a small space without interference issues??
userbinator•43m ago
CDMA is magic.

They're not all going to be transmitting at the same time either.

userbinator•45m ago
It's like a multi-SIM phone, taken to the next level. Seeing this comment recently about ultra-cheap 4G LTE modems, I do wonder if one could make something cheaper with a bunch of those connected to a PC: https://news.ycombinator.com/item?id=45250676
mumber_typhoon•13m ago
The reason for NYC is probably deploying it in a crowded network area to avoid detection. Deploying it in a suburban space would immediately show red flags.

Baldur's Gate 3 Steam Deck – Native Version

https://larian.com/support/faqs/steam-deck-native-version_121
160•_JamesA_•2h ago•94 comments

Find SF parking cops

https://walzr.com/sf-parking/
577•alazsengul•9h ago•337 comments

Libghostty is coming

https://mitchellh.com/writing/libghostty-is-coming
561•kingori•13h ago•178 comments

MLB approves robot umpires for 2026 as part of challenge system

https://www.espn.com/mlb/story/_/id/46357017/mlb-approves-robot-umpires-2026-part-challenge-system
75•pseudolus•3h ago•59 comments

Qwen3-VL

https://qwen.ai/blog?id=99f0335c4ad9ff6153e517418d48535ab6d8afef&from=research.latest-advancement...
190•natrys•6h ago•50 comments

From Rust to reality: The hidden journey of fetch_max

https://questdb.com/blog/rust-fetch-max-compiler-journey/
127•bluestreak•5h ago•18 comments

Markov chains are the original language models

https://elijahpotter.dev/articles/markov_chains_are_the_original_language_models
279•chilipepperhott•4d ago•111 comments

Zutty: Zero-cost Unicode Teletype, high-end terminal for low-end systems

https://git.hq.sig7.se/zutty.git
13•klaussilveira•1h ago•2 comments

NYC Telecom Raid: What's Up with Those Weird SIM Banks?

https://tedium.co/2025/09/23/secret-service-raid-sim-bank-telecom-hardware/
113•coloneltcb•3h ago•49 comments

Is life a form of computation?

https://thereader.mitpress.mit.edu/is-life-a-form-of-computation/
84•redeemed•6h ago•83 comments

Getting AI to work in complex codebases

https://github.com/humanlayer/advanced-context-engineering-for-coding-agents/blob/main/ace-fca.md
260•dhorthy•12h ago•247 comments

A vibrator helped me debug a motorcycle brake light system

https://bikesafe.me/blogs/news/how-a-vibrator-helped-me-debug-a-motorcycle-brake-light-system
32•mygnu•3d ago•14 comments

Quadratic memory reductions for Zero-knowledge Proofs

https://github.com/logannye/space-efficient-zero-knowledge-proofs
6•logannyeMD•58m ago•0 comments

Podman Desktop celebrates 3M downloads

https://podman-desktop.io/blog/3-million
71•twelvenmonkeys•6h ago•18 comments

How to draw construction equipment for kids

https://alyssarosenberg.substack.com/p/how-to-draw-construction-equipment
90•holotrope•8h ago•41 comments

Context Engineering for AI Agents: Lessons

https://manus.im/blog/Context-Engineering-for-AI-Agents-Lessons-from-Building-Manus
54•helloericsf•5h ago•4 comments

How is einx notation universal?

https://einx.readthedocs.io/en/stable/faq/universal.html
7•HiPHInch•2d ago•1 comments

Launch HN: Strata (YC X25) – One MCP server for AI to handle thousands of tools

120•wirehack•12h ago•61 comments

Apple A19 SoC die shot

https://chipwise.tech/our-portfolio/apple-a19-dieshot/
87•giuliomagnifico•7h ago•39 comments

Always Invite Anna

https://sharif.io/anna-alexei
676•walterbell•11h ago•75 comments

Introduction to Programming Languages

https://hjaem.info/itpl
4•parksb•3d ago•0 comments

Is Fortran better than Python for teaching basics of numerical linear algebra?

https://loiseaujc.github.io/posts/blog-title/fortran_vs_python.html
49•Bostonian•7h ago•47 comments

Mesh: I tried Htmx, then ditched it

https://ajmoon.com/posts/mesh-i-tried-htmx-then-ditched-it
184•alex-moon•14h ago•130 comments

From MCP to shell: MCP auth flaws enable RCE in Claude Code, Gemini CLI and more

https://verialabs.com/blog/from-mcp-to-shell/
121•stuxf•12h ago•36 comments

Kitty – GPU based terminal emulator

https://sw.kovidgoyal.net/kitty/
73•andsoitis•3d ago•49 comments

YouTube says it'll bring back creators banned for Covid and election content

https://www.businessinsider.com/youtube-reinstate-channels-banned-over-covid-content-policies-2025-9
258•delichon•6h ago•508 comments

Periodic Table of Cognition

https://kk.org/thetechnium/the-periodic-table-of-cognition/
10•garspin•2h ago•0 comments

consumed.today

https://consumed.today/
172•burkaman•7h ago•32 comments

Shopify, pulling strings at Ruby Central, forces Bundler and RubyGems takeover

https://joel.drapper.me/p/rubygems-takeover/
464•bradgessler•11h ago•309 comments

Show HN: Ggc – A Git CLI tool written in Go with interactive UI

https://github.com/bmf-san/ggc/releases/tag/v6.0.0
23•bmf-san•3d ago•0 comments