Most SS7 exploit service suppliers on darkish internet are scammers

The existence of Signaling System 7 (SS7) cellular telephony protocol vulnerabilities is one thing safety researchers warned about in 2016, and it solely took a 12 months earlier than the primary assaults exploiting them have been noticed.

Within the years that adopted, governments exploited SS7 flaws to monitor people overseas, and hackers used them to hijack Telegram and electronic mail accounts.

Aside from SMS, the SS7 safety gaps could be exploited to intercept or ahead calls, 2FA codes, find gadgets, spoof SMS, and extra.

However are these hacking providers as considerable as rumored, or is the darkish internet stuffed with scammers which are merely ready to grab the cash of aspiring spies?

An investigation on availability

Analysts at SOS Intelligence have searched the darkish internet for suppliers of SS7 exploitation providers and located 84 distinctive onion domains claiming to supply them.

After narrowing down the outcomes to those who seemed to be nonetheless energetic, they ended up with solely the next 4:

• SS7 Exploiter
• SS7 ONLINE Exploiter
• SS7 Hack
• Darkish Fox Market

All 4 declare to supply SMS interception and spoofing, location monitoring, and name interception and redirection.

By analyzing the community topology knowledge for these websites, the researchers discovered that a few of them have been comparatively remoted, not having many inbound hyperlinks.

This isn’t a superb indication of the reliability and credibility of the positioning and is often a sign of lately set-up scamming platforms.

Furthermore, the SS7 Hack web site seems copied from a clearnet web site created in 2021, so it seems like a rip-off.

Upon attempting to make use of its SS7 exploit equipment, hoping for the implementation of an API mirroring operate, the researchers bought nothing because the service was offline.

On the Darkish Fox Market platform, which costs $180 for every focused telephone quantity, researchers discovered the identical demo movies uploaded by Russian customers on YouTube in 2016.

These have been more than likely stolen from YouTube and had no relevance to the Darkish Fox Market platform, which provides no working SS7 exploitation service anyway.

Regardless of all that, by analyzing the supplied cryptocurrency wallets of those platforms, SOS Intelligence discovered that the scammers are making vital quantities of cash.

Actual SS7 exploit providers hidden

The above does not imply that there are not any SS7 exploitation providers on the darkish internet, however quite that the true ones are hidden behind membership-only hacking boards and marketplaces resembling World Market.

As is normally the case on the darkish internet, the primary search outcomes that one can discover on the “floor” usually result in scams.

One must dig deeper to get the true deal, however this by no means eliminates the probabilities of nonetheless touchdown on the receiving finish of a rip-off.

Subtle menace actors have entry to cellphone knowledge by means of affiliations or their very own operations, in order that they need not seek for suppliers of SS7 exploit providers.