Title
Attacking the baseband modem of mobile phones to breach the users' privacy and network security
Abstract
As people are using their smartphones more frequently, cyber criminals are focusing their efforts on infecting smartphones rather than computers. This paper presents the design and implementation of a new type of mobile malware, named (U)SimMonitor for Android and iPhone devices, which attacks the baseband modem of mobile phones. In particular, the mobile malware is capable of stealing security credentials and sensitive information of the cellular technology including permanent and temporary identities, encryption keys and location of users. The developed malware operates in the background in a stealthy manner without disrupting the normal operation of the phone. We elaborate on the software architecture of (U)SimMonitor and provide implementation details for the specific AT commands used by the malware. We analyse the security impacts of (U)SimMonitor malware and we show that it can entirely breach the privacy of mobile users and the security of cellular networks. In particular, a mobile user with an infected phone can be identified and all his/her movements can be tracked. Moreover, all his/her encrypted phone calls and data sessions can be disclosed.
Year
DOI
Venue
2015
10.1109/CYCON.2015.7158480
CyCon
Keywords
Field
DocType
computer network security,data privacy,invasive software,mobile radio,smart phones,Android devices,SimMonitor malware,baseband modem,cyber criminals,iPhone devices,mobile malware,mobile phones,network security,smartphones,software architecture,user privacy,AT commands,android,iPhone,mobile malware,mobile networks
Mobile identification number,Mobile technology,Mobile malware,Mobile computing,Mobile search,Internet privacy,Computer security,Computer science,GSM services,Mobile Web,Mobile telephony
Conference
ISSN
ISBN
Citations 
2325-5366
978-9-9499-5442-1
4
PageRank 
References 
Authors
0.42
7
2
Name
Order
Citations
PageRank
Christos Xenakis122128.00
Christoforos Ntantogian28613.03