3 ms·
Anybody remember class 0 sms? Anybody here that has built an IMSI catcher with osmocomBB and an old motorola phone? The attack surface of 3g/4g/5g is real. So
by cookiengineer 4y ago
Anybody remember class 0 sms? Anybody here that has built an IMSI catcher with osmocomBB and an old motorola phone?
The attack surface of 3g/4g/5g is real.
Somebody in your neighborhood can simply send you a hidden class sms and your phone will blindly download and install the zip/apk/app file, from an unsecured http server.
We live in the golden age of hacking, because there's nothing that the common consumers can do about it...except buying an open phone and flashing an AOSP rom on it, which theoretically can be modified if the GSM modem firmware isn't already implementing this. Oh, and those firmwares are as proprietary as it gets, with as many vulnerabilities as you can imagine. Broadpwn just scratched the surface of it.