|
|
|
On this page we are aiming to collect our findings about IMSI-Catchers that we have spotted in real life. Note: Don't take anything here for granted, we could be riding a dead horse here. [Contact us](https://github.com/SecUpwN/Android-IMSI-Catcher-Detector/wiki/Contact) if you have leaked information or pictures!
|
|
|
|
On this page we are aiming to collect our findings about IMSI-Catchers that we have spotted in real life. [Contact us](https://github.com/SecUpwN/Android-IMSI-Catcher-Detector/wiki/Contact) if you have leaked information or pictures!
|
|
|
|
|
|
|
|
**Snapshots of IMSI-Catchers**
|
|
|
|
# Index
|
|
|
|
|
|
|
|
* [Demonstrations]
|
|
|
|
* [Appearance]
|
|
|
|
* [License Plates]
|
|
|
|
* [Even more Info]
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
# Demonstrations
|
|
|
|
|
|
|
|
Below collection of pictures and assumptions are purely based on monitoring demonstrations, especially the ones of PEGIDA (both sides) in Germany. Means: Don't take anything for granted, we could be riding a dead horse here. But we found it very strange that the casual-looking cars we discovered have so many antennas (which were also hidden under suitcases or similar on the roof in a few cases) and are always being used along the paths where demonstrators march. We don't think that these cars are used to assure communication of police during the demonstrations, but rather to find out who participated in them and spy on those people.
|
|
|
|
|
|
|
|
|
|
|
|
|
| ... | ... | @@ -19,29 +30,31 @@ On this page we are aiming to collect our findings about IMSI-Catchers that we h |
|
|
|
|
|
|
|
* Picture taken on January 30, 2015 in Leipzig, Germany
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Pitcures taken on February 25, 2015 in Düsseldorf, Germany
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
**IMSI-Catcher Vehicle Appearance**
|
|
|
|
# Appearance
|
|
|
|
|
|
|
|
* Very popular car models for this purpose in Germany: VW T4 and Mercedes
|
|
|
|
* Very popular car models for this purpose in Germany: VW (T4) and Mercedes
|
|
|
|
* Darkened windows with curtains on the inside to ensure noone can see in
|
|
|
|
* Vehicles are looking very unobtrusive (almost blending in too good)
|
|
|
|
* Most of the time these vehicles are **uni-color** (preserves multipurpose)
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
**Assumptions**
|
|
|
|
|
|
|
|
* All IMSI-Catcher vehicles I have seen so far had **detachable police lights**
|
|
|
|
* Antennas may be hidden in the large "suitcase" on the roof of the car
|
|
|
|
* IMSI-Catcher vehicles may have **detachable police lights**, but not always
|
|
|
|
* Not sure if the antennas are also removable, but it certainly seems like so
|
|
|
|
* Police is "lending" IMSI-Catchers to each other (IMSI-Catcher vehicles from **Leipzig (Germany)** have been seen at demonstrations in **Dresden (Germany)** and vice versa
|
|
|
|
|
|
|
|
---
|
|
|
|
|
|
|
|
**License Plates**
|
|
|
|
# License Plates
|
|
|
|
|
|
|
|
We know for a fact that every IMSI-Catcher has at least **10 (!) different license plates** and the license plate is likely changed every time the vehicle is moving to a new operating site. But for the pure fun of it, here are some real ones (list will be expanded):
|
|
|
|
We know for a fact that every IMSI-Catcher has at least **10 (!) different license plates** and the license plate is likely changed every time the vehicle is moving to a new operating site. But we have discovered that this is not always so case, so for the pure fun of it, here are some real ones (list will be expanded):
|
|
|
|
|
|
|
|
* AC-JY 723
|
|
|
|
* DD 30600
|
|
|
|
* DD Q 7437
|
|
|
|
* L 7122
|
| ... | ... | @@ -50,4 +63,38 @@ We know for a fact that every IMSI-Catcher has at least **10 (!) different licen |
|
|
|
* L 7187
|
|
|
|
* MEI 00423
|
|
|
|
|
|
|
|
--- |
|
|
\ No newline at end of file |
|
|
|
---
|
|
|
|
|
|
|
|
# Even more Info
|
|
|
|
|
|
|
|
[IMSI-Catchers](https://en.wikipedia.org/wiki/IMSI-catcher) false mobile towers (base stations) acting between the target mobile phone(s) and the real towers of service providers. As such they are considered a Man-In-The-Middle (MITM) attack and can be used to obtain a record of everyone who attended demonstrations with a cell phone (leave your phones at home by all means if you really have to attend). IMSI-Catchers also allow adversaries to intercept your conversations, text messages, and data. Police can use them to determine your location or to find out who is in a given geographic area at what time. Identity thieves can use freely [available tools](http://www.nsaplayset.org/) to monitor and manipulate communications from a parked car in your residential neighborhood; notably for stealing passwords or credit card data from people nearby who make purchases on their phones. In the USA the IMSI-Catcher technology is known under the name "[StingRay](https://en.wikipedia.org/wiki/Stingray_phone_tracker)". Below is a picture of StingRays on the roof of cars.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
This specific MITM attack was [patented](https://spideroak.com/share/IFEU2U2JINCA/GitHub/home/SecUpwN/SpiderOak/PAPERS/Technical/%5BGER%5D-Eavesdropping_Method_Patent.pdf) and first commercialized by Rohde & Schwarz in 2003, although it would be hard to maintain such a patent, since in reality it is just a modified cell tower with a malicious operator. On 24 January 2012, the Court of Appeal of England and Wales held that the patent is [invalid for obviousness](https://spideroak.com/share/IFEU2U2JINCA/GitHub/home/SecUpwN/SpiderOak/PAPERS/Technical/%5BENG%5D-Judgment_Invalid_R%26S_Patent.pdf). But ever since it was first invented, the technology has been used and "improved" by many different companies around the world. Other manufacturers (like Anite) prefer to refer to this spying and tracking equipment in glossy brochures using cozy marketing words like "[Subscriber Trackers](https://spideroak.com/share/IFEU2U2JINCA/GitHub/home/SecUpwN/SpiderOak/PAPERS/SysInfos/%5BENG%5D-Triton_Surveillance_Brochure.pdf)". IMSI-Catcher manufacturers are abusing your mind by disguising their spying products as "life saving equipment". Their real purpose will always be surveillance. Don't get fooled by heart-wrenching stories that may go along with it.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
IMSI-Catcher come in uncountable shapes and sizes:
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Current IMSI-Catchers can be as tiny as the portable Septier IMSI-Catcher Mini.
|
|
|
|
* The smartphone takes up the most space. IMSI-Catchers will even get smaller!
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Below photograph has been taken during the riots on Taksim Square in Instanbul.
|
|
|
|
* Note: It is way too conspicuous and you'll likely never encounter one of these.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* [Body-worn](http://arstechnica.com/security/2013/09/01/the-body-worn-imsi-catcher-for-all-your-covert-phone-snooping-needs/) IMSI-Catcher (for spies amongst the demonstrators):
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* Pay close attention wherever you go: Cell Towers can be hidden everywhere!
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
* More pictures: Search Google for for "GSM Interceptor", "IMSI-Catcher", "StingRay" or "Cell Site Simulator". |
|
|
\ No newline at end of file |
