Sunday, January 24, 2010

Fact about sms spoofing - must read

 By virtue of this fact, a miscreant is able to direct attacks on subscribers inside a network from the Internet, disrupting the mobile experience of the user, as well as incurring non-recoverable charges for the mobile operator. SMS spoofing is achievable because almost all phones today have access to, and are accessible from, the Internet. However, the ability to do SMS spoofing has also led hackers to explore new ways to compromise mobile phones. When you consider how a company would successfully launch mobile advertising, for example, it is easy to understand the need for such capabilities.

One of the main problems with identifying and dealing with SMS spoofing is that there are a number of legitimate uses for this technology, including corporate branding of a message, setting a mobile number for return phone calls and identifying the text with products or services from the vendor. You may have seen this on your own phones when you receive a text message that comes from an apparently random alphanumeric string. Essentially, the SMS message is reset to alter who the sender appears to be. SMS spoofing is a recent development quickly evolving with the growth of cellular networks worldwide.

It is the last type of attack, SMS spoofing, which is undoubtedly one of the fastest growing methods to penetrate mobile operators. There is also SMS Faking, where a hacker simulates the behavior of an SMS switch to send messages. There is SMS flooding, where the content provider "floods" a foreign SMS center with numerous messages. First, there is classic "mobile content spam," where the content provider has a service agreement with the operator and sends questionable content. While the levels of threats vary from Asia to Europe to North America, today there are four identifiable types of SMS mobile spam messages with which operators have to contend. You hear a lot of talk about mobile content security nowadays, particularly as a threat to the long-awaited emergence of mobile advertising. Click here to get the Mobile Marketer newsletters. Receive the latest articles for free. Type D0 hex addresses might be a different matter, but the GSM 03.40 length restriction on these would prevent forging the above address by such means. I would be very surprised if any SMSC would permit lodgement of messages with user-editable type 91 hexadecimal "type of number" originators' addresses.

This device has been powered up with good signal for the past 24 hours. After the target replies, the tracker can then request their position online and receive a street address, post code, and map of their location with an accuracy of around 250 meters. The target then receives an SMS message asking them to confirm they consent to the tracking. To use their services you purchase a monthly subscription or set number of credits, and enter in the targets phone number. Over the past year a number sites have popped up offering web based mobile phone tracking services.

All that is required is their mobile phone number, and carrier.

No comments:

Post a Comment