SIM Toolkit

com.android.stk2

  • AOSP
  • Exercise caution
Vulnerable to hacking, should be disabled.

Special package for dual-sim devices?

Enables carriers to initiate “value-added services”. Basically, some operators provide SIM-cards with applications installed on them.

This has been abused:

  • SimJacker

  • WIBattack.

NOTE: removing this package removes the launcher icon. “com.android.stk2” relies on “com.android.stk” and vice-versa.

References

  1. https://en.wikipedia.org/wiki/SIM_Application_Toolkit#cite_note-CellularZA-1
  2. https://thehackernews.com/2019/09/simjacker-mobile-hacking.html
  3. https://www.zdnet.com/article/new-sim-card-attack-disclosed-similar-to-simjacker/
  4. https://en.wikipedia.org/wiki/Mobile_identity_management

Open in App Manager