Forum Discussion

valor's avatar
valor
Network Novice
Hace 4 meses

Account Security Concern — 355+ Open Ports Scanning “T-Mobile.com” — Severe Third-Party Control

 

My family and I have undergone a serious security breach from account opening in September 2023 to present. I have taken to network security websites and tools to try to determine the cause of the problem that is keeping persistent connection from a third-party on my mobile lines

 

Recently I did a Port Scan for the domain “T-Mobile.com” and found that there is at least 355 open ports (and 10's of thousands of identified, closed, or blocked ports). This is very much out of the norm for any other domain I scan (having only 3-5 open ports). I am seeing Port 11 (sysstat - active users), 9040, 9050 and 9051 open for tor transport, 12345 and 12346 for backdoor Trojans onto our devices, among many other seriously concerning ports

 

Threat actors have enabled third-party licensure and tools for our accounts which forbid security and privacy. Every bill's text and call log activity is 90% unrecognizable activity. It is strongly believed my phone lines and all activity on them are being shared. When I go into the store, the IMEI numbers showing are not the ones belonging to my devices. There is also an unremovable "managed network" under settings and then Wi-Fi and then saved networks that has always been there and is there when I put my eSIMs or physical SIM cards on any device and goes away when I turn the eSIM off or take the card out. The account is sole-owner, and no credentials have been given out to anyone, ever

 

 

It also sounds like, from what I heard in store, simply closing the account and creating a fresh one is not an easy process. We have changed numbers and transferred phone service providers two times already and I do not want to do it again if I don't have to. The crime has survived for almost two years now, and I believe my information and my family's information was leaked
 

How do I stop this? I don't know how to close ports or reassign the IP address designated to t-mobile.com. I'm really not sure what to do, but would really appreciate the help

 

 

¡Gracias!