In the last few years, some attacks were observed on mobile networks, aiming at sending spam SMS to mobile users, with a new way of sending them to bypass network controls implemented on SMS by operators: SMS blasters, as already described in DEFCON conference in 2016. The presentation will first detail the vulnerabilities on mobile networks used by SMS blasters to deliver such spam SMS. A focus will then be made on remediations operators can use to protect their subscribers from this kind of attack, and mobile configuration end users can use to protect themselves. The presentation will be illustrated with examples from “live” cases in France and Switzerland, with collaboration with police and law enforcement teams.
