When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works .
Canadian investigators discovered that the perpetrators had infiltrated tens of thousands of mobile devices connected to the SMS blaster. It recorded 13 million network disruptions. Affect devices were restricted from accessing legitimate cellular networks and emergency services such as 911.
An SMS blaster works by impersonating a cellular network base station, with nearby handsets automatically connecting to it because it's closer and offers a stronger signal than legitimate cell towers. The operators can then send texts that impersonate legitimate institutions to all phones connected to their fake cell site. The fake SMS that these machines send out appear to come from official sources, such as showing the name of a bank or local government, rather than a phone number or contact.
You may like US Departments of Justice and Defense crush four massive botnets totaling 3,000,000 devices Bluetooth tracker hidden in a postcard and mailed to a warship exposed its location DoJ dismantles botnet made of 360,000 infected routers and IOT devices across 163 countries that ran for 16 years Because the message appears to come from institutions, victims are more likely to trust it and tap the link sent to their phones. From there, the targets are then routed to a website designed to steal their credentials or make them pay fraudulent charges. This is called smishing, and the SMS blaster enables attackers to reach tens of thousands of potential victims directly, without going through official networks. This allows them to bypass protections put in place by telecommunications providers and access the SMS inboxes of people in the vicinity.
Watch On “What makes this particularly concerning is the scale and impact,” Toronto Police Deputy Chief Robert Johnson said. “This wasn’t targeting a single individual or business. It had the ability to reach thousands of devices at once. And beyond the financial risk, there are real public safety implications. For instance, when devices are diverted from legitimate networks, even briefly, it interferes with a person’s ability to connect to emergency services.”
The Canadian authorities did not release a photo of the actual device they captured, though. Detective Sergeant Lindsay Riddell said, “The ones we seized in Toronto were uniquely built, and we’re not sharing those publicly for safety reasons.” While cheap SMS-only blasters are primarily used for mass smishing attempts, a different class of devices that operate similarly can pose a threat to national security . IMSI catchers also intercept phone signals, but instead of just sending out fake texts, they can route phone signals from the legitimate network through them. This could potentially allow them to record voice calls and capture device metadata.
The police say that this SMS blaster operation was the first one ever recorded in Canada, but other nations have been dealing with these for years now. In fact, Philippine authorities arrested two Chinese nationals in February this year, operating a similar scheme in which hired drivers carried IMSI devices in the back of their vehicles while loitering near key government installations, military bases, and even the U.S. embassy.
Get Tom's Hardware's best news and in-depth reviews, straight to your inbox.
Key considerations
- Investor positioning can change fast
- Volatility remains possible near catalysts
- Macro rates and liquidity can dominate flows
Reference reading
- https://www.tomshardware.com/tech-industry/cyber-security/SPONSORED_LINK_URL
- https://www.tomshardware.com/tech-industry/cyber-security/sms-blasters-were-cruising-canadian-streets-stealing-cellphone-data-and-blocking-emergency-911-calls-project-lighthouse-infiltrated-tens-of-thousands-of-devices-and-caused-13-million-network-disruptions#main
- https://www.tomshardware.com/subscription
- New 3D device computes using living brain cells — bioelectronic device uses 3D electronic mesh design paired with living tissue
- 3D printing community organizes against California law that would restrict sales to state-approved models to prevent printing gun parts
- Steam Controller leaked review points to $99 MSRP — more expensive than PS5 and Xbox controllers and Nintendo Joy-Cons
- Save over $150 on this fantastic Elegoo resin 3D printer with 16K resolution and a tilting vat — Saturn 4 Ultra 16K is on sale for just $493 right now on Amazon
- [Daily Due Diligence] NVDA NVDA
Informational only. No financial advice. Do your own research.