Three new assaults can be employed to trail the position and stop calls of cellphone users of 4G and 5G connected on cellular networks, analysts from The University of Iowa and Purdue University have disclosed.

Info About the Strikes

Syed Rafiul Hussain, Omar Chowdhury, Mitziu Echeverria, Elisa Bertino and Ninghui Li have jointly brought forth with three separate strikes taking benefits of plan weaknesses and execution oversights of the cellular paging protocol:

  1. The TRacking via Paging mEssage DistributiOn – ToRPEDO strike can be utilized to confirm whether the marked device is existed in a specific cell area and to modify.
  1. The Persistent Information ExposuRe by the CorE netwoRk – PIERCER strike, which modifies a striker along with the understanding cell number of the victim, a device, and a fake base station in the geographical cell of victim to relate the device of the victim IMSI with its cell number, and
  1. The IMSI-Cracking strike, which permits a striker with the understanding of the cell number of the victim to expose the IMSI of victim in just less than thirteen hours by carrying a brute-force strike.

IMSI-Cracking and ToRPEDO are appropriate to 4G and 5G cellular networks. PIERCER can be advantaged against victims on a 4G network.

“For ToRPEDO to be successful, an attacker needs to have a sniffer in the same cellular area as the victim. If the number of possible locations that the victim can be in is large, the expense of installing sniffers (i.e., $200 each) could be an impediment to carrying out a successful attack,” the researchers explained. “In a similar vein, for a successful PIERCER, the attacker needs to have a paging message sniffer and also a fake base station which would cost around $400. The IMSI-Cracking attack for 4G will be feasible only in cases where the attacker can carry out his attack without the victim noticing that his device is not receiving any notifications, for instance, when the victim is sleeping at night.”

They have authorized TorPEDO against 4G cellular networks of three Canadian cellular service providers and entire the US cellular service providers and PIERCER against one leading US cellular service provider and three major cellular service providers of a South Asian country. They merely consider that PIERCER may be possible for other cellular service providers in China, Europe and Russia, as they broadcast IMSIs in paging messages.

They have not yet trialed the IMSI-Cracking and ToRPEDO strikes on 5G network as there is presently a lack of located networks.

What now?

The analysts shared their discoveries with the GSMA, which claims the benefits of cellular network operators around the world, and they have admitted them. Syed Rafiul Hussain stated that it is on the GSMA to patch the bugs that permit IMSI-Cracking  and ToRPEDO strikes, however that carriers necessarily execute a patch for PIERCER.

The analysts have merely put forward some counter-measures against ToRPEDO and adjusted on one that brings false paging messages so as to upset the paging message distribution. Once it’s executed, the time and attempt needed to mount a successful strike would merely be too much for most strikers.

Leave a Reply

Your email address will not be published. Required fields are marked *