Back to the Future. Cross-Protocol Attacks in the Era of 5G
summary
Shows reproduced cross‑protocol attacks that chain SS7, Diameter and GTP messages to intercept calls, track and block subscribers, and bill victims for premium services. Demonstrations use double TCAP/MAP component bypass to slip past SS7 firewalls, fake PBX redirection via insert/update location and connect messages, and GTP create PDP context premium fraud to charge arbitrary subscribers. All attacks run successfully during real-world telecom security assessments; GSMA vulnerability CBD‑2018‑015 is filed. Operators often lack diameter defenses and need signaling firewalls plus IDS and careful border configuration.
AI-written summary · about
chapters (9)
- 0:00Introduction and overview
- 0:46Signaling protocols explained
- 4:39Network identities and nodes
- 10:21Security audit statistics
- 11:26Call interception attacks
- 14:29Firewall bypass techniques
- 18:01Modern network vulnerabilities
- 22:51Financial fraud tactics
- 24:12Mitigation and conclusions
related talks
55mHidden Agendas: Bypassing GSMA Recommendations On SS7 Networks
26mMobile Interconnect Threats: How Next-Gen Products May be Already Outdated
40mWeaponizing Mobile Infrastructure: Are Politically Motivated Cyber Attacks a Threat to Democracy?
33mHacking 5G From Radio Security To The Apis
25mAttacking Mobile Broadband Modems Like a Criminal Would
39mSecure Your Data
52mCellular Exploitation on a Global Scale: The Rise and Fall of the Control Protocol
44mNew Vulnerabilities in 5G Networks