AIMSICD – Android IMSI-Catcher Detector
AIMSICD is an app to detect IMSI-Catchers. IMSI-Catchers are false mobile towers (base stations) acting between the target mobile phone(s) and the real towers of service providers. As such they are considered a Man-In-The-Middle (MITM) attack. In the USA the IMSI-Catcher technology is known under the name “StingRay“.
What it does
AIMSICD attempts to detect IMSI-Catchers through various methods such as these:
- Check tower information consistency
- Signal strength monitoring
- Detect FemtoCells
- LAC/Cell ID Consistency
- Check Neighbouring Cell Info
- Look for silent SMS
- Prevent silent app installations
Feel free to join the discussion and help. See development status.
Why to use it
The FBI or local police regularly deploys IMSI-Catchers hidden in vehicles at protests to obtain a record of everyone who attended with a cell phone (leave your phones at home by all means if you really have to attend). IMSI-Catchers also allow adversaries to intercept your conversations, text messages, and data. Police can use them to determine your location, or to find out who is in a given geographic area at what time. Identity thieves can use freely available tools to monitor and manipulate communications from a parked car in your residential neighborhood, stealing passwords or credit card data from people nearby who make purchases on their phones.
The reason IMSI-Catchers are so commonly used is that it is very easy to get away with using them traceless. This app aims to make it possible to detect the IMSI-Catchers, so that using them becomes a risky proposition. It also aims to make users safer, by alerting on possible interception and tracking.
Warnings
This app does not:
- Provide full device encryption
- Provide secure data transmission (see Tor)
- Provide secure phone calls (see RedPhone)
- Provide secure SMS (see SMSSecure)
- Provide secure application sand-boxing
- Provide app permission control (XPrivacy)
- Provide firewalls (see AFWall+)
- Provide ROOT and remove bloatware
- Prevent already installed rogue applications from full access and spying
The efficiency of this app has not yet been verified against real IMSI-Catchers.
