Hidden ZigBee Netwo...
 
Notifications
Clear all

Hidden ZigBee Network

RolfGutmann
(@rolfgutmann)
Community Legend

Policework: We discovered a hidden ZigBee network at scene. First we missed BLE packets we were looking for and then found there must be a ZigBee network invisible communicating. We suspect that these are either hidden drug or cash stores in-wall or at least non visible. The scene is not small and there are thousand possibilities where ghese RF-transceivers are. Who has expirence in ZigBee sniffing forensics or a similar crime scene? Toda.

Quote
Topic starter Posted : 27/04/2022 4:13 am
jhup
 jhup
(@jhup)
Community Legend

have you tried triangulate/trilaterate it using directional antenna?

It is unclear you are trying to physically locate the device, or just capture the data.

 

 

This post was modified 4 weeks ago by jhup
ReplyQuote
Posted : 27/04/2022 9:57 pm
Passmark
(@passmark)
Active Member

We used to supply and support the Metageek WiSpy Dbx product for this kind of stuff.

But they killed off their cheaper hardware option, then removed their free software, then added a bunch of confusing options and their pricing has got a bit out of control. So hard to recommend unless you are doing this kind of stuff on a daily basis.

 

ReplyQuote
Posted : 28/04/2022 1:23 am
RolfGutmann
(@rolfgutmann)
Community Legend

The beacons came in at 868MHz, so EU stuff (other continents differ). With Ellisys unit we tried to tri/tri but out of nothing RF silence all around. They either observe our investigation or by occasion. The ZigBee net is just a control-net for protection/hidding to switch either locks or mini-systems (e.g. modified Nue lamps).

We have to locate these invisible depots.

Toda for your response!

NextStep: With R&S we discuss about a all-spectrum-logger setup at scene.

ReplyQuote
Topic starter Posted : 28/04/2022 5:42 am
RolfGutmann
(@rolfgutmann)
Community Legend

Upd: R&S Germany cannot help, their devices are too big to fly with drone in-warehouse. RF direction finding on BLE 5.1 or higher resp. ZigBee or other IoT is like listening to ants. You hear but dont see. Hard Fight in-front. Lets Fun.

ReplyQuote
Topic starter Posted : 29/04/2022 6:38 am
RolfGutmann
(@rolfgutmann)
Community Legend

4Learners: A compact DeepDive

https://www.youtube.com/watch?v=9xzXp-zPkjU

ReplyQuote
Topic starter Posted : 01/05/2022 7:00 am
dega
 dega
(@dega)
Active Member

Dear Rolf I am really curious about this. I googled around and I read that Alexa is compatible with zigbee. Maybe help

ReplyQuote
Posted : 01/05/2022 4:01 pm
RolfGutmann
(@rolfgutmann)
Community Legend

Many home automation ecosystems eaven work with all VA Virtual Assistants (Amazon, Apple and Google). You may be cautious with 'compatible' its more the 'implementation with' ZigBee. Here the specs

https://zigbeealliance.org/wp-content/uploads/2019/11/docs-05-3474-21-0csg-zigbee-specification.pdf

ReplyQuote
Topic starter Posted : 02/05/2022 3:59 am
RolfGutmann
(@rolfgutmann)
Community Legend

Upd: As they used the 868MHz-ISM-band and not the over-crowded 2.4GHz-band of most smart home COTS product ecosystems, they are techn. advanced and they hide something worthy they invest in advanced tech (cost-value ratio). To scan/sniff the traffic is difficult and to catch all beacons requires an integrated system, by USB-A attached dongles will fail (think about twice) on the Bus of USB.

ReplyQuote
Topic starter Posted : 11/05/2022 7:38 am
Passmark
(@passmark)
Active Member

As they used the 868MHz-ISM-band ... they are techn. advanced

868Mhz is used by a lot of mundane stuff that isn't very advanced at all. e.g. garage door remotes and RFID readers.

ReplyQuote
Posted : 16/05/2022 12:56 am
RolfGutmann
(@rolfgutmann)
Community Legend

Absolutelly. Correct. I extend my message as-I-had-in-brain. For a ZigBee network mostly on 2.4GHz spectrum range, a ZigBee network running on 868MHz looks techn. advanced as rare COTS smart home automation ecosystems use it and requires self-skills not just box-moving-plug-and-connect.

ReplyQuote
Topic starter Posted : 16/05/2022 3:04 am
Share:
Share to...