CAPEC-617: Cellular Rogue Base Station
Description
In this attack scenario, the attacker imitates a cellular base station with their own rogue base station equipment. Since cellular devices connect to whatever station has the strongest signal, the attacker can easily convince a targeted cellular device (e.g. the retransmission device) to talk to the rogue base station.
- Likelihood of attack
- Not rated by MITRE
- Typical severity
- Low
- Abstraction
- DetailedA low-level, detailed pattern, often for a particular technology.
Mechanism of attack: Engage in Deceptive Interactions
Prerequisites
- None
Skills required
- LowThis technique has been demonstrated by amateur hackers and commercial tools and open source projects are available to automate the attack.
Consequences
- Confidentiality
Read Data
Intercept and control cellular data communications to/from mobile device.
Mitigations
- Passively monitor cellular network connection for real-time threat detection and logging for manual review.
Related weaknesses (CWE)
CAPEC 3.9 links no CWE weakness to this pattern.