[ NNSquad ] Vodafone cellular femtocell hacked

[Lauren Weinstein <lauren@vortex.com>]

Vodafone cellular femtocell hacked

http://j.mp/rgGBU8  ("Hacker's Choice" Wiki)

    "There are many ways of intercepting the traffic between the Femto and
     the core network ... record all voice calls into a file and just press
     the play button or stream them ...  The femto can be used to place
     calls or send SMS on somebodies else SIM card. This means the attacker
     is not charged for the call/sms ... The vulnerability:  The Femto cell
     contains a Mini-RNC/Node-B which is not a real RNC nor a Node-B. It's
     something inbetween. The mini-RNC can request real encryption keys and
     authentication vectors for any vodafone UK customer from the vodafone
     core network (like a real RNC)."

 - - -

--Lauren--
Lauren Weinstein (lauren@vortex.com): http://www.vortex.com/lauren
Co-Founder: People For Internet Responsibility: http://www.pfir.org
Founder:
 - Network Neutrality Squad: http://www.nnsquad.org
 - Global Coalition for Transparent Internet Performance: http://www.gctip.org
 - PRIVACY Forum: http://www.vortex.com
Member: ACM Committee on Computers and Public Policy
Blog: http://lauren.vortex.com
Google+: http://vortex.com/g+lauren
Twitter: https://twitter.com/laurenweinstein 
Tel: +1 (818) 225-2800 / Skype: vortex.com