there’s a ghost in my phone · if you know someone’s phone number: • track whereabouts, •...

18
There’s a Ghost in My Phone

Upload: others

Post on 16-Mar-2020

5 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: There’s a Ghost in My Phone · If you know someone’s Phone Number: • Track whereabouts, • Know where they go for work • Who they meet and when-- You can • Spy on whom

There’s a Ghost in My Phone

Page 2: There’s a Ghost in My Phone · If you know someone’s Phone Number: • Track whereabouts, • Know where they go for work • Who they meet and when-- You can • Spy on whom

If you know someone’s Phone Number: • Track whereabouts, • Know where they go for work • Who they meet and when-- You can • Spy on whom they call • Spy on what they say over the phone • And you can read their texts.

Karsten Nohl

Page 3: There’s a Ghost in My Phone · If you know someone’s Phone Number: • Track whereabouts, • Know where they go for work • Who they meet and when-- You can • Spy on whom

Long Term Evolution (Data Only, VoLTE)Global System for Mobile

Code-division multiple access

Page 4: There’s a Ghost in My Phone · If you know someone’s Phone Number: • Track whereabouts, • Know where they go for work • Who they meet and when-- You can • Spy on whom

LTE

Page 5: There’s a Ghost in My Phone · If you know someone’s Phone Number: • Track whereabouts, • Know where they go for work • Who they meet and when-- You can • Spy on whom

TELECOM ATTACKS

Page 6: There’s a Ghost in My Phone · If you know someone’s Phone Number: • Track whereabouts, • Know where they go for work • Who they meet and when-- You can • Spy on whom

4G’s EPC

Page 8: There’s a Ghost in My Phone · If you know someone’s Phone Number: • Track whereabouts, • Know where they go for work • Who they meet and when-- You can • Spy on whom

1. Simple SIM

2. Trusting Tower

3. Compromised Core

THE TERRIBLE THREE

Page 9: There’s a Ghost in My Phone · If you know someone’s Phone Number: • Track whereabouts, • Know where they go for work • Who they meet and when-- You can • Spy on whom

1. Simple SIM

Page 10: There’s a Ghost in My Phone · If you know someone’s Phone Number: • Track whereabouts, • Know where they go for work • Who they meet and when-- You can • Spy on whom

Subscriber Identification Module =

International Mobile Subscriber Identity (IMSI)

+

Note: IMEI = Int’l Mobile Equipment ID

Encryption Key Ki

Page 11: There’s a Ghost in My Phone · If you know someone’s Phone Number: • Track whereabouts, • Know where they go for work • Who they meet and when-- You can • Spy on whom

MOBILeditWoron Scan

Sim-Emu

Page 12: There’s a Ghost in My Phone · If you know someone’s Phone Number: • Track whereabouts, • Know where they go for work • Who they meet and when-- You can • Spy on whom

SPYZIE AND COUSINS

Page 13: There’s a Ghost in My Phone · If you know someone’s Phone Number: • Track whereabouts, • Know where they go for work • Who they meet and when-- You can • Spy on whom

2. Trusting Tower

Page 14: There’s a Ghost in My Phone · If you know someone’s Phone Number: • Track whereabouts, • Know where they go for work • Who they meet and when-- You can • Spy on whom
Page 15: There’s a Ghost in My Phone · If you know someone’s Phone Number: • Track whereabouts, • Know where they go for work • Who they meet and when-- You can • Spy on whom

3. Compromised Core

Page 16: There’s a Ghost in My Phone · If you know someone’s Phone Number: • Track whereabouts, • Know where they go for work • Who they meet and when-- You can • Spy on whom

SS7 for 007

SS7 Pentest Tool: ss7MAPer

Page 17: There’s a Ghost in My Phone · If you know someone’s Phone Number: • Track whereabouts, • Know where they go for work • Who they meet and when-- You can • Spy on whom
Page 18: There’s a Ghost in My Phone · If you know someone’s Phone Number: • Track whereabouts, • Know where they go for work • Who they meet and when-- You can • Spy on whom

Thank you!