{"id":34563,"date":"2025-01-18T10:36:10","date_gmt":"2025-01-18T10:36:10","guid":{"rendered":"https:\/\/peraltafinancing.com\/5g-technology\/detection-of-real-world-fake-base-station-fbs-attacks-in-thailand\/"},"modified":"2025-01-18T10:36:10","modified_gmt":"2025-01-18T10:36:10","slug":"detection-of-real-world-fake-base-station-fbs-attacks-in-thailand","status":"publish","type":"post","link":"https:\/\/fivemor.com\/?p=34563","title":{"rendered":"Detection of Real-world Fake Base Station (FBS) Attacks in Thailand"},"content":{"rendered":"


\n<\/p>\n

\n
<\/a><\/div>\n

It’s been a while since we created our security tutorial<\/a>, back in 2018. One of the items we discussed in there were the fake cell towers or the fake base stations. The issues highlighted there still exist as highlighted by AIS CISO, Pepijn Kok <\/a>at The Telecom Threat Intelligence Summit (TTIS<\/a>) 2024.<\/p>\n

The cyber threat actors exploited GSM authentication vulnerabilities to use fake base stations as part of SMS phishing attacks to steal from real bank accounts. In his talk Pepijn explains how AIS worked with ecosystem partners in Thailand to detect and block these attacks.<\/p>\n

<\/a><\/div>\n

The talk described two case studies. The first one was a report from Dec 2022 where certain bank customers and online retail platform users were receiving SMS messages masquerading as the bank or online platform itself (something not typically possible). The messages contained links to malicious content. The second one is a recent case from April 2024 where AIS customers started receiving fake SMS with malicious links. It was obvious in that case that the SMS did not come from the AIS network which triggered AIS to start investigating as they were sure there was a fake base station in operation. The talk describes how in both the scenarios the gangs were caught.<\/p>\n

The talk is embedded below:<\/p>\n