Security researcher demos new cellphone attack

A researcher at the University of Luxembourg has demonstrated a new type of attack against mobile phones at the security conference DeepSec in Vienna.

Using a base transceiver station - widely available for around $1,000 - he showed how common programming errors in cellphones' communication stack can be exploited to gain control over the devices.

Ralf-Philipp Weinmann says he found 'devastating' flaws in a large percentage of cellular communication stacks. He says anyone sufficiently motivated would be able to exploit these to make an attacks - which would be almost undetectable.

The exploit would allow hackers to take over control of mobile phones anywhere within the range of the rogue transceiver - which Weinmann points out could mean hundreds of phones at a time in crowded urban areas.

Read more -here-

• Dropbox breach exposes customer credentials, authentication data
• Google: Passkey authentications top 1 billion across 400 million accounts
• FTC fines Razer for misrepresenting COVID masks as N95s
• FCC fines Verizon, AT&T other major carriers nearly $200 million for sharing customer data
• Federal regulators accuse Amazon executives of deleting messages
• FCC restores net neutrality rules