I attended a seminar on Telecom networks few day back and there I came to know how vulnerable our signalling network (SS7/ SIGTRAN) is.

The speaker discussed an attack in which a spoofed SMSC is connected to a legitimate network's SMSC and all the traffic routed to the legitimate one can be retrieved at fake SMSC. In this way, an attacker can exploit user details.

I wonder how can this attack take place without operator's knowledge and intervention? or even if its possible to conduct this attack or not?

  • This might be a question for follow-up with the speaker – schroeder Feb 27 '18 at 9:50
  • True. I wanted to but had another imp commitment so skipped the Q/A session – Peter Feb 27 '18 at 9:52
  • You can still contact the presenter – schroeder Feb 27 '18 at 10:04
  • I don't have details. If I have it then why would I post here, sir – Peter Feb 27 '18 at 10:12
  • 1
    Was the seminar public? Can you post a link to the event? – schroeder Feb 27 '18 at 10:39

It the absence of Signalling firewall(SS7,Diameter and GTP) in the receiving network, if an attacker uses a software that has the capability to send SS7 Map messages. The attacker can send Map messages that are expected from SMSC of external network towards the receiving network. The attackers can send MAP messages with spoof CgPA such as ATI to get the subscribers locations, since there is not firewall, the Core CS network is not smart enought to detects these attrocities, unless you have a very smart telecom engineers that is monitoring the traffic 24/7 and are actively blocking traffic from operators that does not have certain traffic aggrement with them.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.