I attended a seminar on Telecom networks few day back and there I came to know how vulnerable our signalling network (SS7/ SIGTRAN) is.
The speaker discussed an attack in which a spoofed SMSC is connected to a legitimate network's SMSC and all the traffic routed to the legitimate one can be retrieved at fake SMSC. In this way, an attacker can exploit user details.
I wonder how can this attack take place without operator's knowledge and intervention? or even if its possible to conduct this attack or not?