How to make calls from someone else's mobile phone

[Марат]

How to make calls from someone else's mobile phone.

Imagine that your friend calls you on a mobile phone and asks when will you return the money that he transferred to your account. The problem is that you never asked him about it. And the amount, to put it mildly, is very decent.
According to his stories, it turns out that you personally, excitedly and in a hurry, called him yesterday and asked to urgently transfer this money to your account. But the account number is completely unfamiliar to you. And you called your friend from your own mobile phone (his number was determined).
You are looking for outgoing calls: indeed you called yesterday. The only problem is that you did not do this and are sure that the mobile phone was not released from the hands.
Imagine that just half an hour later, another friend of yours calls and asks the same questions. Embarrassment.
But what if the same thing happened in a slightly different scenario: say 'you' did not call a friend, but your enemy with insults? And your number is clearly displayed on the screen of the mobile phone of a person whom you yourself, without knowing it, insulted. In most cases, such an occasion may be enough for a very unpleasant response.
The situation looks even worse if an attacker calls the local police station with threats or, even worse, with a false warning that a building in the city center is mined. A substantial fine and other severe penalties are provided.
In a word, the consequences of such a misunderstanding are very, very far-reaching. This state of affairs could have been justified at least somehow, if it had not been for the number that was identified on the phone of the person you called, and if this call did not appear in your outgoing calls.
You can call an arbitrary number from your mobile phone at any time, and you won’t even know about it, although you don’t release the phone from your hands and are sure that no one has touched it.
There can be many scenarios that an attacker who has a similar attack tool in his hands can play. Each of them, depending on the imagination of the attacker, can have very serious consequences.
What does an attacker use to implement an attack?
The essence of the attack is to make your phone perceive the intruder’s Bluetooth headset as its authorized external device.
To carry out the described actions, the attacker exploits the vulnerability of phones, which manifests itself in the transmission of messages of the vCard format. vCard is an electronic business card that contains information about a person: his name, surname, phone number, date of birth and other data. The vCard message format resembles XML and is universal for all phones.
We emphasize the fact that the reception of vCard messages on a number of models is allowed from any user, and not necessarily an authorized one. This is done so that anyone can send information about themselves to an arbitrary phone. Based on the information from vCard as conceived by the creators of mobile phones, the user must make a conclusion about the person who sent the message. If the information about the subscriber read has generated trust, then the user can allow the receipt of messages from him without authorization for subsequent connections.
We describe the mechanism for working with vCard in more detail. When a remote device sends a vCard message to the user's phone, it recognizes it as vCard. After that, the mobile phone temporarily assigns the status of authorized to an unfamiliar remote device.
This means that the user's mobile phone completely “trusts” the authorized device when exchanging information via Bluetooth. This status is only set for the duration of the vCard message. After the message is read, the device is excluded from the authorized list.
The vulnerability of such a mechanism lies in the fact that if the vCard transmission is suddenly interrupted, the recording of the transmitting device remains in the list of authorized devices and is not deleted by the mobile phone.
In order to carry out such an attack, an attacker, as a rule, creates some utility that makes several attempts to send a vCard message to the attacked phone and interrupts this
transmission during direct message sending. One of the main features of this attack is the timely disconnection.
It is almost impossible to defend against an attack with a Bluetooth transmitter operating in active mode. The only recommendation is to put Bluetooth in stealth mode, so that it would be more difficult for an attacker to find the phone. Note that even in stealth mode and if the phone is turned off, an attacker can still carry out an attack.

 

[Детектив-Юг]

Thank!
Interesting little maneuvers.
No wonder I do not like this feature.
I prefer the simplest pipes, without the Internet and other entertainment.

 

[Бюро Рысь]

Thank!
Interesting little maneuvers.
No wonder I do not like this feature.
I prefer the simplest pipes, without the Internet and other entertainment.

I fully support, especially our flags, all you need to eat, but you can connect to us only the old fashioned way!

 

[Андрей Захаров]

Thanks Marat))) Very interesting facts ...

 

[Матушкин Андрей Николаевич]

There are simpler combinations for such attacks.
And the victim’s phone can be turned off.