Detection of Real-world Fake Base Station (FBS) Attacks in Thailand

It's been a while since we created our security tutorial, back in 2018. One of the items we discussed in there were the fake cell towers or the fake base stations. The issues highlighted there still exist as highlighted by AIS CISO, Pepijn Kok at The Telecom Threat Intelligence Summit (TTIS) 2024.

The cyber threat actors exploited GSM authentication vulnerabilities to use fake base stations as part of SMS phishing attacks to steal from real bank accounts. In his talk Pepijn explains how AIS worked with ecosystem partners in Thailand to detect and block these attacks.

The talk described two case studies. The first one was a report from Dec 2022 where certain bank customers and online retail platform users were receiving SMS messages masquerading as the bank or online platform itself (something not typically possible). The messages contained links to malicious content. The second one is a recent case from April 2024 where AIS customers started receiving fake SMS with malicious links. It was obvious in that case that the SMS did not come from the AIS network which triggered AIS to start investigating as they were sure there was a fake base station in operation. The talk describes how in both the scenarios the gangs were caught.

The talk is embedded below:

You can learn more about TTIS here. The video of all the talks from day 1 is here and day 2 is here.

Related Posts: 

• The 3G4G Blog: Attack Surfaces for Different Generations of Mobile Technologies
• The 3G4G Blog: Presentations from ETSI Security Conference 2023
• The 3G4G Blog: Top 10 New (2022) Security Standards That You Need to Know About!
• The 3G4G Blog: Authentication and Key Management for Applications (AKMA) based on 3GPP credentials in the 5G System (5GS)
• The 3G4G Blog: 5G and Cyber Security
• The 3G4G Blog: Realizing Zero Trust Architecture for 5G Networks
• The 3G4G Blog: Bug hunting in 5G Networks and Devices
• The 3G4G Blog: AT&T Cybersecurity Experts Provide 5G Security Overview
• The 3G4G Blog: Everything you need to know about 5G Security
• 3G4G: Overview of Security in Mobile Cellular Networks 

GSA's Updates on Fixed Wireless Access (FWA) Numbers

In the GSA 4G/5G FWA Forum Plenary back in June, GSA identified announced service offers using LTE or 5G from 554 operators in 187 countries and territories, and launched services from 477 operators in 175 markets worldwide, as of late 2023. However, digging into these global numbers and the regional picture of operators delivering FWA services using LTE or 5G varies widely.

The GSA 4G-5G FWA Forum Plenary brought together operators from the MEA and APAC regions to identify and share their best practice fixed wireless access use cases. The webinar is embedded below:

The FWA Market June 2024 report is available here to download.

Related Posts: 

• Connectivity Technology Blog: How is Fixed Wireless Access (FWA) deployed?
• Connectivity Technology Blog: GSMA Intelligence Holds 5G Fixed Wireless Access (FWA) MasterClass
• Connectivity Technology Blog: LTE vs 5G Fixed Wireless Access (FWA)
• Connectivity Technology Blog: GSMA Releases 5G Fixed Wireless (FWA) Playbook
• Telecoms Infrastructure Blog: High-Speed FWA Using mmWave With the Help of Li-Fi
• The 3G4G Blog: Introduction to Fixed Wireless Access (FWA)