3

I'm talking about a class of old mobile phones that are not smartphones but are still (theoretically) Internet-capable, at least via 3G. Examples of such phones include Series 40 Nokia phones or the Samsung phone featured in Spectre (OK that one at least is still available so I have to retract the 'old' word). Note these phones enable running user code via their Java thingy. Symbian phones, however, are out of the scope of my question.

Note I don't ask about browsing the Internet with such phones - these capabilities are, in my experience, often all but useless nowadays anyway. Instead, I mean carrying the phone around while it is switched on and making phone calls.

Until recently I assumed these phones were too simple and too old to be unsafe... But is this really correct? It suddenly struck me that these phones are likely directly accessible from the Internet with an IP address. Aren't these phones, therefore, under a constant scan? To make things worse, many of such phones are very unlikely to receive updates (are they even technically capable of updating themselves?)

In short, one may not wish to browse the internet with their phone, will they be a target?

This question asks about dumbphones. My question asks about phones that are in-between dumbphones and smartphones - that already provide attack vectors (Internet, user code, ...?) but not precautions (updates, app scanning, ...?) of smartphones. It would therefore seem that such phones are the worst?

And yet there is, from my experience, noticeable demand for these in-between phones: namely from older people who seek the ease of use of a dumbphone, fear they could not manage to use a smartphone, but won't use a true dumbphone because of their limited availability. This, I believe, makes my question important.

3
  • I am a bit confused, what do you mean by "directly routable from the internet through IPv4 address"? Feb 7, 2020 at 20:10
  • @RashadNovruzov Well since they're 3G enabled the ISP assigns every such phone a public IPv4 address, don't they? Now these phones are not behind any sort of NAT or firewall...
    – gaazkam
    Feb 7, 2020 at 20:12
  • Everyone has a different threats model, perhaps having a dumb phone compromised means you'll be on the receiving end of a drone strike. Or your mentally unstable and abusive husband will find you and harm you and your children. Don't expect the risk understanding of strangers to apply to you.
    – wireghoul
    Feb 9, 2020 at 8:35

1 Answer 1

0

Well, first of all you are behind a NAT of a cell phone operator equipment. Secondly, your IP changes frequently - reconnecting to different cell towers will do that (there are many factors to that). Thirdly - there are have to be either zero-day vulnerability or some services running on your phone accepting external requests to be vulnerable.

Phones are way more susceptible to 0 day vulnerabilities and MiTM attacks by impersonating wifi APs and Cell Towers (they are available for purchase and can fit in a rucksack) rather than directly from cell network.

Most of this attacks are being done by injecting javascripts through the browser when you are being served by malicious actors (wifi\cell tower impersonation). So disabling that will solve most vulnerability issues.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .