±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35734
New Yesterday: 1 Visitors: 113

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

5G SUPI-Catcher SDR (ex LTE IMSI)

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

TinyBrain
Senior Member
 

5G SUPI-Catcher SDR (ex LTE IMSI)

Post Posted: Mar 25, 19 01:02

Around Bern, Switzerland we found several fake cell towers propagating being an eNB of LTE. In 5G the devices get SUPI to be identified uniquely. To find new 5G fake cell towers from Sunrise/UPC with false MCC/MNC propagation we want to equip our autonomous rover with a SDR SUPI catcher to log from Railway mainstation, Hotel Schweizerhof and around Bundeshaus (parlament swiss gov) and also in the region of von Wattenwil BE.

Are there in the U.S. or Israel already 5G SUPI-Catchers available on SDR?

Please report me personally. Toda raba!  
 
  

TinyBrain
Senior Member
 

Re: 5G SUPI-Catcher SDR (ex LTE IMSI)

Post Posted: Apr 19, 19 03:37

This post also was intended to understand the digital layer to dive into crypto.  
 
  

jaclaz
Senior Member
 

Re: 5G SUPI-Catcher SDR (ex LTE IMSI)

Post Posted: Apr 19, 19 08:29

- TinyBrain
This post also was intended to understand the digital layer to dive into crypto.


... and seemingly completely failed at it.

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 
 
  

TinyBrain
Senior Member
 

Re: 5G SUPI-Catcher SDR (ex LTE IMSI)

Post Posted: Apr 20, 19 01:17

With DC in 5G how can a mobile modem (RF frontend) detect in one of the connections that a MITM is in operation? Can a mobile identify e.g. the EIR for discovering a catcher instead of an eNB?  
 

Page 1 of 1