News / Science & Technology

Researchers Hack Verizon Device, Turn it Into Mobile Spy Station

A cell phone user passes a Verizon store in New York in this April 27, 2006 file photo.
A cell phone user passes a Verizon store in New York in this April 27, 2006 file photo.

Two security experts said they have figured out how to spy on Verizon Wireless mobile phone customers by hacking into devices the U.S. carrier sells to boost wireless signals indoors.

The finding, which the experts demonstrated to Reuters and will further detail at two hacking conferences this summer, comes at a time of intense global debate about electronic privacy, after top-secret U.S. surveillance programs were leaked by a former National Security Agency contractor, Edward Snowden, last month.

"This is not about how the NSA would attack ordinary people. This is about how ordinary people would attack ordinary people,'' said Tom Ritter, a senior consultant with the security firm iSEC Partners.

Verizon said it has updated the software on its signal-boosting devices, known as femtocells or network extenders, to prevent hackers from copying the technique of the two experts.

But Ritter said motivated hackers can still find other ways to hack the femtocells of Verizon, as well as those offered by some 30 carriers worldwide to their customers.

Femtocells, which act as tiny cellphone towers, can be purchased directly from Verizon for $250. Used models can be obtained online for about $150.  Ritter and his colleague, Doug DePerry, demonstrated for Reuters how they can eavesdrop on text messages, photos and phone calls made with an Android phone and an iPhone by using a Verizon femtocell that they had previously hacked.

They declined to disclose how they had modified the software on the device, saying they do not want to make it any easier for criminals to figure out similar ways to hack femtocells.

The two said they plan to give more elaborate demonstrations wo weeks from now at the Black Hat and Def Con hacking conferences in Las Vegas. More than 15,000 security professionals and hackers are expected to attend those conferences, which feature talks on newly found bugs in communications systems, smart TVs, mobile devices and computers that run facilities from factories to oil rigs.


Verizon Wireless released a Linux software update in March that prevents its network extenders from being compromised in the manner reported by Ritter and DePerry, according to company spokesman David Samberg.

"The Verizon Wireless Network Extender remains a very secure and effective solution for our customers,'' Samberg said in a statement. He said there have been no reports of customers being impacted by the bug that the researchers had identified. The company is a joint venture between Verizon Communications Inc and Vodafone Group Plc.


Samberg said his company uses an internal security team as well as outside firms to look for vulnerabilities in the devices it sells, before and after they are released.

Still, the two researchers said they are able to use the hacked femtocell to spy on Verizon phones even after Verizon released that update because they had modified the device before the company pushed out the software fix.

The researchers built their "proof of concept'' system that they will demonstrate in Las Vegas with femtocells manufactured by Samsung Electronics Co and a $50 antenna from Wilson Electronics Inc.

They said that with a little more work, they could have weaponized it for stealth attacks by packaging all equipment needed for a surveillance operation into a backpack that could be dropped near a target they wanted to monitor.

For example, a group interested in potential mergers might place such a backpack in Manhattan restaurants frequented by investment bankers. Verizon's website said the device has a 40-foot range, but the researchers believe that could be expanded by adding specialized antennas.

The iSEC researchers are not the first to warn of vulnerabilities in femtocells, but claim to be the first to hack the femtocells of a U.S. carrier and also the first running on a wireless standard known as CDMA. Other hacking experts have previously uncovered security bugs in femtocells used by carriers in Europe.

CTIA, a wireless industry group based in Washington, in February released a report that identified femtocells as a potential point of attack. John Marinho, CTIA's vice president for cybersecurity and Technology, said that the group is more concerned about other potential cyber threats, such as malicious apps. He is not aware of anycase where attacks were launched via femtocells.

Still, he said, the industry is monitoring the issue: "Threats change every day.''


You May Like

Isolation, Despair Weigh on Refugees in Remote German Camp

Refugees resettled near village of Holzdorf deep in German forestland say there is limited interaction with public, mutual feelings of distrust

Britons Divided Over Bombing IS

Surveys show Europeans generally support more military action against Islamic State militants, but sizable opposition exists in Britain

Russia Blacklists Soros Foundations as 'Undesirable'

Russian officials add Soros groups to a list of foreign and international organizations banned from giving grants to Russian partners

Featured Videos

Your JavaScript is turned off or you have an old version of Adobe's Flash Player. Get the latest Flash player.
With HIV, Can We Get to Zero?i
Carol Pearson
November 29, 2015 1:23 PM
The theme of this year's World AIDS Day is "Getting to Zero." The U.N. says new HIV infections have been reduced by 35 percent since 2000 and AIDS-related deaths are down by 42 percent since the peak in 2004. VOA's Carol Pearson takes a look at what it might take to actually have an AIDS-free generation.

Video With HIV, Can We Get to Zero?

The theme of this year's World AIDS Day is "Getting to Zero." The U.N. says new HIV infections have been reduced by 35 percent since 2000 and AIDS-related deaths are down by 42 percent since the peak in 2004. VOA's Carol Pearson takes a look at what it might take to actually have an AIDS-free generation.

Video Political Motives Seen Behind Cancelled Cambodian Water Festival

For the fourth time in the five years since more than 350 people were killed in a stampede at Cambodia’s annual water festival, authorities canceled the event this year. Officials blamed environmental reasons as the cause, but many see it as fallout from rising political tensions with a fresh wave of ruling party intimidation against the opposition. David Boyle and Kimlong Meng report from Phnom Penh.

Video African Circus Gives At-Risk Youth a 2nd Chance

Ethiopia hosted the first African Circus Arts Festival this past weekend with performers from seven different African countries. Most of the performers are youngsters coming form challenging backgrounds who say the circus gave them a second chance.

Video US Lawmakers Brace for End-of-Year Battles

U.S. lawmakers are returning to Washington for Congress’ final working weeks of the year. And, as VOA's Michael Bowman reports, a full slate of legislative business awaits them, from keeping the federal government open to resolving a battle with the White House over the admittance of Syrian refugees.

Video Taiwan Looks for Role in South China Sea Dispute

The Taiwanese government is one of several that claims territory in the hotly contested South China Sea, but Taipei has long been sidelined in the dispute, overshadowed by China. Now, as the Philippines challenges Beijing’s claims in an international court at The Hague, Taipei is looking to publicly assert its claims. VOA’s Bill Ide has more from Beijing.

Video After Terrorist Attacks, Support for Refugees Fades

The terrorists who killed and injured almost 500 people around Paris this month are mostly French or Belgian nationals. But at least two apparently took advantage of Europe’s migrant crisis to sneak into the region. The discovery has hardened views about legitimate refugees, including those fleeing the same extremist violence that hit the French capital. Lisa Bryant has this report for VOA from the Paris suburb of Cergy-Pontoise

Video Syrian Refugees in US Express Concern for Those Left Behind

Syrian immigrants in the United States are concerned about the negative tide of public opinion and the politicians who want to block a U.S. plan to accept 10,000 Syrian refugees. Zlatica Hoke reports many Americans are fighting to dispel suspicions linking refugees to terrorists.

Video Thais Send Security Concerns Down the River

As Thailand takes in the annual Loy Krathong festival, many ponder the country’s future and security. Steve Sandford reports from Chiang Mai.

Video Islamic State Unfazed by Losses in Iraq, Syria

Progress in the U.S.-led effort to beat Islamic State on its home turf in Iraq and Syria has led some to speculate the terror group may be growing desperate. But counterterror officials say that is not the case, and warn the recent spate of terror attacks is merely part of the group’s evolution. VOA National Security correspondent Jeff Seldin has more.

Video Belgium-Germany Border Remains Porous, Even As Manhunt For Paris Attacker Continues

One of the suspected gunmen in the Nov. 13 Paris attacks, Salah Abdeslam, evaded law enforcement, made his way to Belgium, and is now believed to have fled to Germany. VOA correspondent Ayesha Tanzeem makes the journey across the border from Belgium into Germany to see how porous the borders really are.

Video US, Cambodian Navies Pair Up in Gulf of Thailand

The U.S. Navy has deployed one of its newest and most advanced ships to Cambodia to conduct joint training drills in the Gulf of Thailand. Riding hull-to-hull with Cambodian ships, the seamen of the USS Fort Worth are executing joint-training drills that will help build relations in Southeast Asia. David Boyle reports for VOA from Preah Sihanouk province.

Video Uncertain Future for Syrian Refugee Resettlement in Illinois

For the trickle of Syrian refugees finding new homes in the Midwest city of Chicago, the call to end resettlement in many U.S. states is adding another dimension to their long journey fleeing war. Organizations working to help them integrate say the backlash since the Paris attacks is both harming and helping their efforts to provide refugees sanctuary. VOA's Kane Farabaugh reports.

VOA Blogs