MITM On PSTN -- Novel Methods For Intercepting Phone Calls

No ratings

Presented at NULLCON GOA 2023 by

Kirils Solovjovs

In this talk, the author proposes a novel method for intercepting phone calls over PSTN, including mobile networks. We'll briefly discuss the necessary components of the attack, including Caller ID spoofing, SS7, call diverts, and social engineering, and then join the all together to form the novel attack method. Key Takeaways: PSTN / MN / CLIP / CNAM SS7 features and attacks Relevant social engineering techniques Attack 1: Simultaneous ring attack Attack 2: Diversion attack Tactic 1: Interception of phone calls Tactic 2: Alteration of phone calls (content) Tactic 2: Alteration of phone calls (metadata) Proposed solutions