DEF CON 24 - JusticeBeaver - Discovering and Triangulating Rogue Cell Towers

The number of IMSI-catchers (rogue cell towers) has been steadily increasing in use by hackers and governments around the world. Rogue cell towers, which can be as small as your home router, pose a large security risk to anyone with a phone. If in range, your phone will automatically connect to the rogue tower with no indication to you that anything has happened. At that point, your information passes through the rogue tower and can leak sensitive information about you and your device. Currently, there are no easy ways to protect your phone from connecting to a rogue tower (aside from some Android apps which are phone specific and require root access). In this talk I’ll demonstrate how you can create a rogue cell tower detector using generic hardware available from Amazon. The detector can identify rogue towers and triangulate their location. The demonstration uses a software defined radio (SDR) to fingerprint each cell tower and determine the signal strength of each tower relative to the detector. With a handful of these detectors working together, you can identify when a rogue cell tower enters your airspace, as well as identify the signal strength relative to each detector. This makes it possible to triangulate the source of the new rogue cell tower.
Bio:
JusticeBeaver (Eric Escobar) is a Security Engineer at Barracuda Networks. His interests are broad and generally include putting computers in places you wouldn’t expect. From chicken coops to rockets and even bee hives. Before being called to the dark side, Eric procured a Bachelor’s and Master’s degree in Civil Engineering. He now enjoys all things wireless, from WiFi, to SDR, and Ham Radio. Last year his team placed 1st in DEF CON 23’s Wireless CTF.

[@morgulbrut]

It's worth to watch only for the explanation of triangulation... ;)

[@gunturpribadi3705]

good

[@cesaryasus5319]

I asked her two questions. where can I have more detailed information to assemble i.m.s.i catcher (Stingray)? where can I buy this item assembled at low cost?

[@thallium200]

Harris makes the Stingray. Same company that provides communications equip to the US govt

[@PureAmericanPatriot]

thallium200, how do we get anonymous or shadow brokers to hack them? Can you imagine just how nice a customer listing and sales records (with IMSI's and other UID's) would be? It would be nice for once to turn the harassment around and plan flashmobs wherever they have the white MB Sprinter parked.

[@_randombob]

lol I have everything but the gsm module on my desk.

[@monamoralisch264]

pump it to elk

[@blazingkin]

No one is pointing out that this dude just doxxed himself?

greater good