WiFi Based IMSI Catcher Black Hat - Europe - 2016
3We introduce a new type of IMSI catcher which operates over WiFi. Whilst existing Stingray type IMSI catchers exploit 2-4G radio protocols to track movements of mobile subscribers, in this talk, we introduce two new approaches to track mobile devices which exploit authentication protocols that operate over WiFi. These protocols are now widely implemented in most modern mobile OSes, allowing for the creation of a low cost IMSI catcher.
We demonstrate how users may be tracked on a range of smartphones and tablets including those running iOS , Android and other mobile OSs. This tracking can be performed silently and automatically without any interaction from the tracked user. We have developed a proof of concept system that demonstrates our IMSI catcher employing passive and active techniques.
Finally, we present guidelines for vendors and cellular network operators to mitigate the user privacy issues that arise.
Piers O'Hanlon | Researcher, University of Oxford
Ravishankar Borgaonkar | Researcher, University of Oxford
Location: Gallery Hall
Date: Thursday, November 3 | 10:00am-11:00am
Format: 50 Minute Briefing
Track: Android, iOS and Mobile Hacking
Black Hat - Europe - 2016 Hacking conference
#hacking, #hackers, #infosec, #opsec, #IT, #security