Thmyl Brnamj Simjacker May 2026

1. Overview Simjacker (discovered by AdaptiveMobile Security in 2019) is a vulnerability that allows an attacker to send a specific type of SMS to a target mobile phone, which then instructs the SIM card’s S@T Browser Library (THMYL) to execute commands. The attack leverages the BRNAMJ (Bearer Name) parameter to select the communication channel.