Mobile security threats have gained attention following the arrest of three individuals in Toronto for operating an unauthorized SMS blaster device, as first reported by Bleeping Computer.
An SMS blaster functions similarly to an IMSI catcher, a device that masquerades as a legitimate cell tower to intercept mobile communications. These devices exploit vulnerabilities in cellular protocols by tricking nearby phones into connecting to them before authentication occurs. Once connected, a phone may broadcast its International Mobile Subscriber Identity (IMSI), which is tied to the SIM card, or its International Mobile Equipment Identity (IMEI), which is linked to the physical device.
While newer 5G networks utilize encryption to protect these identifiers, devices often fall back to older 2G, 3G, or 4G standards when signal strength is low, leaving them susceptible to interception. Attackers can use these identifiers to track user locations or intercept calls and text messages. Security researchers have also identified paging attacks that allow adversaries to link a phone number to an IMSI by observing network activity patterns. To mitigate these risks, some privacy-focused carriers have introduced identifier rotation, which periodically changes a user's IMSI to prevent long-term tracking and render harvested data stale.
Source: Bleeping Computer
