Project

General

Profile

Actions

Feature #1177

closed

Detecting Silent SMS Attacks

Added by Mark Weston about 2 months ago. Updated about 21 hours ago.

Status:
Closed
Priority:
3.x
Assignee:
-
Start date:
03/02/2024
Due date:
% Done:

0%

Estimated time:
16:00 h

Description

Both the Android IMSI-Catcher Detector and SnoopSnitch projects have been abandoned:
https://github.com/CellularPrivacy/Android-IMSI-Catcher-Detector
https://github.com/srlabs/snoopsnitch

As it stands, there are no Android apps to detect when your device has fallen victim to an IMSI Catcher / Stingray. Since this project is well developed and active, I am proposing incorporating some of the features from AIMISCD into this project. Would it be feasible to start with detecting silent SMS which is not as big of an undertaking as detecting an IMSI catcher?

This GPL 3.0 code will be helpful:
https://github.com/CellularPrivacy/Android-IMSI-Catcher-Detector/blob/development/AIMSICD/src/main/java/com/secupwn/aimsicd/smsdetection/SmsDetector.java

Actions #1

Updated by Soren Stoutner about 2 months ago

I'm not sure how feasible this is on modern Android. It look like the code you linked to was scraping information from the OS log and looking for suspicious entries. The comments talk about targeting Android 4.x. But in later versions of Android, apps can no longer read the main OS log entries that don't apply to themselves unless they have root access.

Actions #2

Updated by Soren Stoutner about 21 hours ago

  • Status changed from New to Closed

I am going to close this as it doesn't seem feasible on modern versions of Android. If anyone has any ideas about how it could be done feel free to leave a commend and I will reopen the feature request.

Actions

Also available in: Atom PDF