SS7 MITM Attack Against WhatsApp and Telegram

Re:SS7 MITM Attack Against WhatsApp and Telegram by Animats on Tuesday May 10, 2016 @01:42PM (#11669034)

Thanks. From that article: "To access an SS7 network, attackers can acquire an existing provider’s connection on the black (underground) market and obtain authorization to operate as a mobile carrier in countries with lax communications laws. In addition, any hacker who happens to work as a technical specialist at a telecommunications operator, would be able to connect their hacking equipment to the company’s SS7 network. In order to perform certain attacks, legitimate functions of the existing communication network equipment must be used. There is also an opportunity to penetrate a provider’s network through a cracked edge device (GGSN or a femtocell)."

So they don't have a way to break into WhatsApp without breaking into SS7 first. SS7 isn't publicly accessible, and it doesn't extend out to the air link for mobiles. The attacker has to find a backdoor into SS7. The problem is that, once on the SS7 network, you can send lots of messages which are believed by telco networks. You can divert phone calls and set up MITM attacks easily.

If this works against WhatsApp, their app lacks adequate MITM protection.

[ Parent | on HN ]

Re:SS7 MITM Attack Against WhatsApp and Telegram by toomuchtodo on Tuesday May 10, 2016 @02:32PM (#11669436)

You can get the SS7 link for a few hundred bucks a month:

https://www.youtube.com/watch?v=lQ0I5tl0YLY

Its an hour, but I highly suggest the talk.

[ Parent | on HN ]

Re:SS7 MITM Attack Against WhatsApp and Telegram by bogomipz on Tuesday May 10, 2016 @07:17PM (#11671445)

But you can just connect to a carrier SS7 network because you bought an SS7 gateway appliance or because bought a SIP trunk to some third party. It doesn't work like this. You need to have an agreement with a carrier to even talk to their gateway. These are usually well vetted as well because you are entering into a financial agreement with a carrier when you connect to them this way.

[ Parent | on HN ]

Re:SS7 MITM Attack Against WhatsApp and Telegram by rand1012 on Tuesday May 10, 2016 @08:10PM (#11671720)

But we can easily assume that every major intelligence community has access to SS7.

[ Parent | on HN ]