T1430.002 Impersonate SS7 Nodes
sub-techniqueMobileAdversaries may exploit the lack of authentication in signaling system network nodes to track the location of mobile devices by impersonating a node. By providing the victim’s MSISDN (phone number) and impersonating network internal nodes to query subscriber information from other nodes, adversaries may use data collected from each hop to eventually determine the device’s geographical cell area or nearest cell tower.
01
platforms
Platforms this applies to.
AndroidiOS
02
sub-technique of
The broader entity this sits under.
03
mitigations
ATT&CK mitigations that reduce this.
04
detected by (3)
Data components that detect this.
05
software (1)
Malware and tools associated with this.
06
source
Where this definition is published.