Detecting Fake 4G Base Stations in Real Time
EFF researcher Cooper Quintin introduces Crocodile Hunter, an open-source tool using low-cost SDRs to detect 4G LTE IMSI catchers (Hailstorm) in real time.
Summary
The Evolution from 2G to 4G IMSI Catchers
While early cell-site simulators (Stingrays) forced devices to unencrypted 2G networks, modern surveillance devices (such as Hailstorm) operate directly on 4G LTE protocols.
Understanding 4G Cell-Site Simulator Mechanics
Cooper Quintin explains how 4G IMSI catchers manipulate LTE broadcast parameters and Tracking Area Updates (TAUs) to intercept device identifiers and location data.
Introducing Crocodile Hunter for Real-Time Detection
Quintin presents Crocodile Hunter, an open-source monitoring framework combining software-defined radios (SDRs) and GPS to identify rogue base station anomalies.
Mapping and Auditing Cellular Surveillance
Demonstrating live drive-by spectrum monitoring shows how civil society groups can map unauthorized cell-site simulator deployments and protect protest environments.
Related talks
Main Stage·40 min
Cooper Quintin · Yomna Nasser
Shows how modifying an inexpensive consumer 4G LTE mobile hotspot allows researchers to capture raw network packets and detect IMSI catcher surveillance.
Main Stage·30 min
Cooper Quintin
Cooper Quintin answers questions on Crocodile Hunter, 4G IMSI catcher detection mechanics, and cellular surveillance tracking.
Main Stage·38 min
Campbell Murray
Demonstrates practical GSM interception using commodity SDR hardware and open-source software to decrypt 2G voice calls.