Hack Turns Verizon Femtocell Into Spy Tool

Two security experts, Tom Ritter and Doug DePerry from iSEC Partners, have found a vulnerability in Verizon's Wireless Network Extender, also known as a femtocell, that allowed them to monitor almost exactly how people are using their Verizon mobile phones. A femtocell acts like a mini-cell phone tower and enhances indoor coverage to provide more reliable service. It is lightweight and about the size of a cable modem.

Tom Ritter was able to hack into NPR host Laura Sydell's phone to find out her phone number and when she called someone, with the ability to record and playback the entire conversation with ease. Ritter says he was able to do it all with some free software and a $250 femtocell that you can buy at Best Buy.

"This is not about how the NSA would attack ordinary people. This is about how ordinary people would attack ordinary people," said Tom Ritter, a senior consultant with the security firm iSEC Partners.

A software update rolled out by Verizon fixed the issue uncovered by iSEC, but the duo said that talented hackers could find ways to further breach the femtocells, according to Reuters, including those offered by other carriers.

"The Verizon Wireless Network Extender remains a very secure and effective solution for our customers," the company continued. "Our engineers and security experts designed the Network Extender to offer the best balance of customer experience with the strongest device and network security while still protecting the safety and wireless experience of other wireless users within the coverage area for the device. We continue to proactively work to protect the Network Extender from any new, real threats if they are discovered."

Read more -here-

• Dropbox breach exposes customer credentials, authentication data
• Google: Passkey authentications top 1 billion across 400 million accounts
• FTC fines Razer for misrepresenting COVID masks as N95s
• FCC fines Verizon, AT&T other major carriers nearly $200 million for sharing customer data
• Federal regulators accuse Amazon executives of deleting messages
• FCC restores net neutrality rules