Dean Procter

Mobile Phone Banking vs IMSI Catchers

Real Title: Mobile & Phone Banking in the Age Of The $1500 IMSI catcher.

Without getting all techo, you may have read where I reported last year that GSM encryption was kaput. Before you get all excited and congratulate yourself that your are on 3g, you may not always be and most of the rest of the world including about 3 billion of your customers are still in the GSM boat.

IMSI catchers basically trick your phone into placing the call through their network, allowing you to make your call but enabling the catcher to eavesdrop or record your call on the way. Enterprising Chris Paget demonstrated one at a hackers convention and it is probably worse than Barnaby Jack's old spew the cash from the ATM hack which he demonstrated up the street at another convention. The ATM's can be fixed by the operators. The mobile's can't be fixed quite as easily.

You probably have a few ideas by now. The demonstrated exploit was a little rough round the edges but represents a serious issue for mobile/phone banking and  corporate communications. 

Of course someone will (or may have already..) come up with a solution for banking.

My latest blog posts
Thank you Andrew Haldane 2648 views : 0 comments
NATO persecution update 5961 views : 0 comments
There's no security like no security. 5612 views : 0 comments
Groups I founded
I have not founded any groups yet.
Groups I belong to
Information Security : David Spinks : 73 members
Going green : Peter Roberts : 30 members
Whatever... : Steve Ellis : 44 members
Futuristic Banking : 92 members
Online Banking : Shripad Vaidya : 150 members
Innovation in Financial Services : Elton Cane : 275 members