0

Can an attacker intercept my mobile traffic exploiting the ss7 vulnerability even if encrypted?

Improve this question
9
  • On its own, no, there's no magic "disable encryption on mobile connection", but SS7 is usually popular for intercepting 2FA or social engineering attack. So if the user/service provider is vulnerable to it, the attacker can have a new valid certificate for user's website or register their device for user's messaging app even if it's encrypted
    – Martheen
    Commented Feb 15, 2021 at 3:15
  • Attacker needs access to network operator to exploit SS7. Although SS7 has been deprecated in LTE, legacy support still exists when the device fallsback to 3G & 2G.
    – defalt
    Commented Feb 15, 2021 at 9:29
  • @Martheen what encryption are you talking about ? You TCP encryption or GSM encryption ?
    – BiosRootKit
    Commented Feb 15, 2021 at 22:04
  • 1
    TLS, SSH, app-level E2EE, those aren't affected. If you only have GSM encryption protecting you, you're effectively sending unencrypted traffic to the public internet anyway.
    – Martheen
    Commented Feb 16, 2021 at 3:47
  • 1
    What's the point of intercepting if they can't read it anyway?
    – Martheen
    Commented Feb 16, 2021 at 20:46

0

Reset to default

You must log in to answer this question.

Browse other questions tagged .