WiFi-Based IMSI Catcher

Explore a groundbreaking Black Hat conference talk introducing WiFi-based IMSI catchers, a novel approach to tracking mobile devices. Delve into two new methods that exploit WiFi authentication protocols, contrasting them with traditional Stingray-type IMSI catchers that use 2-4G radio protocols. Learn about IMSI fundamentals, conventional IMSI catchers, and the intricacies of WiFi-based alternatives, including automatic configuration, manual configuration, and automatic WiFi authentication. Examine EAP-SIM/AKA identities and transport, WiFi-calling connections, and gain insights into IPsec and Internet Key Exchange (IKEV2). Discover potential operator/vendor mitigations and user protection strategies in this comprehensive 59-minute presentation by Piers O'Hanlon and Ravishankar Borgaonkar.