I'm looking into USSD messages for a project I'm currently working upon and hoping someone can shed some light into spoofing.
Firstly, I know it should be possible if you have the relevant information (correct IMSIs and global titles etc.) and access to a telco environment. But how easy is it for a malicious user to send out a spoofed USSD string? What sort of equipment will be required?