position:imsi catcher

Chinese hacker shows how every every 4G/LTE call can be intercepted

▻http://www.theregister.co.uk/2016/10/23/every_lte_call_text_can_be_intercepted_blacked_out_hacker_finds

Ruxcon Hacker Wanqiao Zhang of Chinese security house Qihoo 360 has blown holes in 4G LTE networks by detailing how to intercept and make calls, send text messages and even force phones offline.

The team tested their work against Frequency Division Duplexing (FDD) LTE networks, which are more popular than Time Division Duplexing (TDD) LTE and are used in Britain, the US, and Australia. The competing TDD-LTE design is more common in Asian countries and in regions where population densities are higher.

[...]

Zhang uses Ravishankar Borgaonkar, and Altaf Shaik’s IMSI catcher with a femtocell to pull off the over-the-air meddling. A series of radio resource control protocol messages using the international mobile subscriber identity (IMSI) numbers captured in the IMSI catcher can be used to trigger a denial of service, place calls and send texts, or intercept communications.

Zhang modified code from the alpha-grade open-source Open LTE project to track network availability updates in the area, which is critical to successfully pulling off the attacks.

She says phone manufacturers should ignore base station redirection commands and instead use automatic searchers to find the best available. This would prevent attackers from forcing LTE devices to connect to malicious stations.

#IMSI #IMSI_Catcher
#4G #LTE
#snooping

VICE News Investigation Finds Signs of Secret Phone Surveillance Across London
▻https://news.vice.com/article/vice-news-investigation-finds-signs-of-secret-phone-surveillance-across-l

A VICE News investigation has found evidence that sophisticated surveillance equipment that spies on people’s phones is being used across London, and uncovered a growing black market for the technology worldwide.

Signs of IMSI catchers — also known as stingrays or cell-site simulators — were found at several locations in the British capital, including UK parliament, a peaceful anti-austerity protest, and the Ecuadorian embassy.

A former senior surveillance insider also confirmed to VICE News that they have been used by UK police.

The portable devices are typically used by state law enforcement. They monitor thousands of phones at a time, and are capable of intercepting calls, text messages, and emails.

After going undercover, however, VICE News was offered an IMSI catcher for $15,000 from a company that claimed to have sold the devices to private companies and state law enforcement all over the world — including Russia, Africa, and the US.

#IMSI-catcher #Londres #Milipol #Police_(institution) #Royaume-Uni #Surveillance_de_masse #Téléphonie_mobile

Pocket-sized IMSI catcher with nice Android user interface
▻http://www.septier.com/368.html

http://www.septier.com/contentManagment/uploadedFiles/MINIIMSI_Hand_jpg(1).jpg

L’#industrie multimilliardaire de la surveillance
The data hackers, by Pratap Chatterjee
▻http://mondediplo.com/openpage/the-data-hackers
▻http://www.tomdispatch.com/blog/175757

“The challenge of managing information has become the challenge of managing the light” (Glimmerglass)

Trois types d’entreprises font du #data-mining ou #DPI, autant de légions de la #silicon_army :

– les services-gratuits-vous-le-produit
– les #data_brokers
– les entreprises spécialisées dans la surveillance

[this] category is made up of professional #surveillance companies. They generally work for or sell their products to the government — in other words, they are paid with our tax dollars — but we have no control over them. Harris Corporation provides technology to the FBI to track, via our mobile phones, where we go; #Glimmerglass builds tools that the U.S. intelligence community can use to intercept our overseas calls; and companies like James Bimen Associates design software to hack into our computers.
▻http://www.corpwatch.org/article.php?id=15665
▻http://online.wsj.com/article/SB10001424053111904194604576583112723197574.html
▻http://www.glimmerglass.com/products/intelligent-optical-systems
►http://www.corpwatch.org/article.php?id=15864

Glimmerglass donc, dont certaines technologies (“210 tiny gold-coated mirrors mounted on microscopic hinges etched on to a single wafer of silicon. It can help transmit data as beams of light across the undersea fiber optic cables”) permettent de surveiller l’#internet_traffic qui transite par les #câbles_sous-marins :
▻http://www.wikileaks.org/spyfiles/docs/glimmerglass/55_glimmerglass-cybersweep.html

Pour les communications via #mobile :

The simplest form of surveillance technology is an IMSI catcher. (IMSI stands for International Mobile Subscriber Identity, which is unique to every mobile phone.) (...) One of the key players in this field is the Melbourne, Florida-based Harris Corporation, which has been awarded almost $7 million in public contracts by the Federal Bureau of Investigation (#FBI) since 2001, mostly for radio communication equipment. For years, the company has also designed software for the agency’s National Crime Information Center to track missing persons, fugitives, criminals, and stolen property.

Harris was recently revealed to have designed an IMSI catcher for the FBI that the company named “Stingray.” Court testimony by FBI agents has confirmed the existence of the devices dating back to at least 2002. Other companies like James Bimen Associates of Virginia have allegedly designed custom software to help the FBI hack into people’s computers, according to research by Chris Soghoian of the American Civil Liberties Union (ACLU).

SS8 of Milpitas, California, sells software called #Intellego that claims to allow government agencies to “see what [the targets] see, in real time”

Cf. ▻http://seenthis.net/messages/176446

Take #Raytheon, a major U.S. military manufacturer, which makes Sidewinder air-to-air missiles, Maverick air-to-ground missiles, Patriot surface-to-air missiles, and Tomahawk submarine-launched cruise missiles.
[en vidéo] ▻http://www.theguardian.com/world/video/2013/feb/10/raytheon-software-tracks-online-video