Hacking 4G and how to get arrested in 10 minutes
summary
Shows a practical exploit chain that pulls permanent subscriber IDs and forces fallback to insecure networks using an IMSI catcher, built with a USRP $765 running OpenAirInterface. Attack steps: lure phones via priority frequency, trigger identity request to harvest IMSI, then send attach reject to cause ghost mode or force 2G/3G downgrade, enabling full MITM. Claims work in experiment, notes LTE messages lack integrity protection, contrasts DIY cost with a Stingray $135k, and warns of likely arrest.
AI-written summary · about
chapters (7)
- 0:00Start
- 4:02Denial-of-Service
- 4:58Downgrade to 2G or 3G
- 5:46Obtain an IMSI Catcher
- 6:32Build your own IMSI Catcher
- 7:37Crimes
- 7:57Prevention
related talks
44mLTE And IMSI Catchers: Then And Now
01h 06mLTE & IMSI Catcher Myths
54mExposing device features on 4G & 5G networks
22mHacking LTE Public Warning Systems
48mMobile Network Hacking, IP Edition
30mThe Attacker Has Expensive Radio Equipment, But Your Android Phone Is Resilient
40mWeaponizing Mobile Infrastructure: Are Politically Motivated Cyber Attacks a Threat to Democracy?
25mAttacking Mobile Broadband Modems Like a Criminal Would