Sophisticated Call ...
 
Notifications
Clear all

Sophisticated Call Spoofing case

12 Posts
6 Users
0 Likes
825 Views
RolfGutmann
(@rolfgutmann)
Posts: 1185
Noble Member
Topic starter
 

A 19-year-old teen conducted a large number of bomb threats to Jewish institutions using sophisticated spoofing tech elements to hide including Wi-Fi misuse. Read here about an exceptional case of how to hide behind multi-layer which was close to perfect. Only by making mistakes of the suspect the case broke up by the Lahav 433 unit (Israeli Police) and the FBI.

http//www.thedailybeast.com/articles/2017/03/23/the-slip-up-that-caught-the-jewish-center-bomb-caller.html

 
Posted : 25/03/2017 9:08 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

Sophisticated? ?

jaclaz

 
Posted : 25/03/2017 9:19 pm
RolfGutmann
(@rolfgutmann)
Posts: 1185
Noble Member
Topic starter
 

Cascaded

 
Posted : 25/03/2017 9:59 pm
(@droopy)
Posts: 136
Estimable Member
 

Spoofing a number must be illegal as it is an identity problem.

Moreover, China has recently ordered ALL people to present a valid ID or passport or document to revalidate their mobile numbers. Else, they will suspend the mobile.

In this case, using SpoofCard must be illegal as you change your real identity and affect another identity. Service must be down.

 
Posted : 26/03/2017 5:53 pm
(@athulin)
Posts: 1156
Noble Member
 

Spoofing a number must be illegal as it is an identity problem.

Doubtful. If cell phone numbers are used as legal proof of identity, yes. But are they?

 
Posted : 26/03/2017 6:18 pm
(@droopy)
Posts: 136
Estimable Member
 

I mean, a mobile phone number or landline, must be equal to a car license plate.
If you replace or cheat it, you are generating a modification of the real identity which must be illegal.

China recently have improved their regulations on this field to improve security.

 
Posted : 26/03/2017 7:35 pm
jaclaz
(@jaclaz)
Posts: 5133
Illustrious Member
 

Spoofing a number must be illegal as it is an identity problem.

Moreover, China has recently ordered ALL people to present a valid ID or passport or document to revalidate their mobile numbers. Else, they will suspend the mobile.

In this case, using SpoofCard must be illegal as you change your real identity and affect another identity. Service must be down.

I mean, a mobile phone number or landline, must be equal to a car license plate.
If you replace or cheat it, you are generating a modification of the real identity which must be illegal.

China recently have improved their regulations on this field to improve security.

I wouldn't take China as an example of legality or of "fair" laws, anyway.

And since this happened in Israel and the kid was targeting US (and Australia and New Zealand) Jewish institutions, I doubt that the new policy in China could have affected the case.

BTW in most countries (since day one) you need to provide a valid ID when you get a SIM card, or a "throwaway" phone but AFAICT the controls on the authenticity of the ID are - to say the least - superficial.

And you can still get one (for free) from the Internet, example
http//www.giffgaffeuropa.com/en/freesim

In that case you need a valid postal address but I believe that it wouldn't be that difficult to manage to get one delivered under a fake name/address in more than a few countries 😯 and there are of course several sites that allegedly sell "anonymous" GSM cards.

However, you may have noticed that no mobile number (nor landline) was involved, like you know

The FBI sent a subpoena to the company that runs the service, New Jersey-based TelTech, in the hope of obtaining the caller’s real number. But that phone number turned out to be a disposable Google Voice line established under an alias.

jaclaz

 
Posted : 26/03/2017 9:49 pm
(@trewmte)
Posts: 1877
Noble Member
 

BTW in most countries (since day one) you need to provide a valid ID when you get a SIM card, or a "throwaway" phone but AFAICT the controls on the authenticity of the ID are - to say the least - superficial.

And you can still get one (for free) from the Internet, example
http//www.giffgaffeuropa.com/en/freesim

Not in the UK. Anyone can go to certain stores or supermarkets and pick SIM cards for £1.00 and just top them up. No checks or anything.

The same applies when buying a pay-as-go or pay-as-you throw phone (prepaid phones). A free SIM card is inside the box. This is done to persuade the user to use a particular operator's service.

 
Posted : 26/03/2017 11:33 pm
RolfGutmann
(@rolfgutmann)
Posts: 1185
Noble Member
Topic starter
 

I agree with droopy that spoofing a number must be declared illegal. The process of registering any type of number (landline and mobile) should be bound by a reliable identity check and would prevent from many kind of crime-by-calling. Efforts to standardize has to come from ITU-T in collaboration with 3GPP.

Therefore this number would become mankind's global unique identity number (in use GUTI Globally Unique Temporary Identity in LTE).

 
Posted : 27/03/2017 1:12 am
(@trewmte)
Posts: 1877
Noble Member
 

I agree with droopy that spoofing a number must be declared illegal.

It is illegal, if used for illegality; just unpreventable. Cybercrime has proved legislation is not a deterrent. Moreover, a law in one country may not be law in another.

If a user sends a text message spoofing their own number (using a spoofing website) is the genuine owner of the number committing a criminal offence merely for playing a prank?

What about cases of intellectual property in the number? The number is not the same as a web-address? Furthermore, how to deal with owning a number when dial codes keep changing and so on?

Unlike landline, mobile numbers are a premium for operators. Say the user doesn't pay their subscription or usage bill. Does the number get taken away from the user? How then would the number ever be unique to one person? Prepaid is a good example why the proposal could be unworkable at the current time.

The process of registering any type of number (landline and mobile) should be bound by a reliable identity check and would prevent from many kind of crime-by-calling. Efforts to standardize has to come from ITU-T in collaboration with 3GPP.

Therefore this number would become mankind's global unique identity number (in use GUTI Globally Unique Temporary Identity in LTE).

Attempts have been made to formulate a user identifiable to a number.

For an ENUM subscriber to be able to activate and use the ENUM service, it needs to obtain three elements from a Registrar

- A personal Uniform Resource Identifier (URI) to be used on the IP part of the network, as explained below.
- One E.164 regular personal telephone number associated with the personal URI, to be used on the PSTN part of the network.
- Authority to write their call forwarding/termination preferences in the NAPTR record accessible via the personal URI.
https://en.wikipedia.org/wiki/Telephone_number_mapping

With 3GPP standards there is Mobile Number Portability (MNP) 3GPP TS 23.066 3.1.0 1999-10-13 - 14.0.0 2017-03-21 which is not just a follow me service but transferring the number from one operator to another (usually associated with post-paid accounts).

Attempts have been made for prepaid to register and Orange and Virgin Mobiles are but two examples.

 
Posted : 27/03/2017 2:30 pm
Page 1 / 2
Share: