CAPECattack pattern

CAPEC-617 Cellular Rogue Base Station

Low Official page ↗
Abstraction
Detailed
Status
Draft
Typical severity
Low
CAPEC version
3.9

Description

In this attack scenario, the attacker imitates a cellular base station with their own "rogue" base station equipment. Since cellular devices connect to whatever station has the strongest signal, the attacker can easily convince a targeted cellular device (e.g. the retransmission device) to talk to the rogue base station.

Prerequisites

• None

Skills required

• [Low] This technique has been demonstrated by amateur hackers and commercial tools and open source projects are available to automate the attack.

Consequences

• Confidentiality: Read Data

Mitigations

• Passively monitor cellular network connection for real-time threat detection and logging for manual review.

Related

Child of · CAPEC (1)

  • CAPEC-616 Establish Rogue Location attack pattern