Detailing MTS, Beeline, Megaphone and Tele2,

[Демитрий]

Detailing of MTS, Beeline, Megafon and Tele2, which can be used by attackers

Detailed mobile communication allows you to receive detailed information about all calls made, sent by SMS or MMS, used Internet traffic (the date and time of the call / sending SMS, MMS, the duration of the call or the volume of the Internet session, the number by which the call was made / SMS, MMS sent, its cost).

Obtaining this information, in addition to the consent of a citizen, is a crime and is carried out only within the framework of the activities of law enforcement agencies and special services.

However, since the criminal market is saturated with the offer of services for detailing negotiations, a fair question arises: either corruption has persisted in the law enforcement system or there are some other ways to obtain details that are not related to operational search measures.

After analyzing the methods of obtaining information about the details of negotiations, we identified several methods for collecting this information that criminals can use:

1. SIM card recovery

The attacker learns the passport data of the SIM card holder and makes a duplicate of his passport. After that, he comes to the communication salon and asks to reissue his SIM card. The old card is blocked. Having received a SIM card at his disposal, an attacker can register in his personal account on the website of a mobile operator and gain full access to details of negotiations. Moreover, this method will give him the opportunity to intercept all social accounts, messengers, ads, sites, emails that were tied to this number by phone.

2. Interception of control SMS
An attacker requests a password change for access to the user's personal account of mobile services on the operator’s website. The new code is sent to the user, but is intercepted by the attacker. For example, using femtocells. By entering the code on the operator’s website, the criminal receives full access to the details of the negotiations.

3. Phishing
The attacker sends the user a notification about the need to change the password on the operator’s website and a link to the cloned page of this operator. By entering the code on this site, the user will voluntarily pass it to the criminals and they will gain access to his personal account, and therefore details of the negotiations.

4. Physical access to the phone
Having physical access to the phone even for a couple of minutes, an attacker can promptly request a new password for your personal account or even order details to your email address.


Beeline: * 110 * 9 #
MTS: * 111 * 1006 * 1 #
Megaphone: * 105 * 00 #
Tele 2: login by link

5. Address to the telecom operator
An attacker can also order details of negotiations in the office of a telecom operator from an unscrupulous employee or simply provide him with fake documents or a power of attorney written on behalf of the legal owner of the phone number. At least, this opportunity is provided to him by the telecom operators themselves. But the competence in checking documents or powers of attorney for employees of mobile operators, of course, no.

Source