Massive SMS attack: Canada intercepts thousands of smartphones and blocks access to 911

In Toronto, police have busted a dangerous network of fraudsters who used mobile SMS blasters to attack cellphone users. These devices, hidden in the back seats of ordinary cars, imitated the operation of base stations of mobile operators, causing thousands of smartphones to automatically connect to them.

Operation Project Lighthouse

Toronto police arrested three people during Operation Project Lighthouse. The attackers used so-called SMS-blasters – portable systems that create a “signal trap” for mobile phones. According to the police, this is the first such case of the use of such technologies on the territory of Canada, although a similar practice has been recorded in the world for several years.

Technical characteristics and network impact description

The system works by simulating a cell tower signal. A nearby smartphone automatically picks up the attacker’s device because it generates a stronger signal than the faraway legitimate carrier towers. As a result of the actions of hackers, 13 million failures in the operation of mobile networks were recorded. This led to the temporary blocking of access to real communication towers for tens of thousands of devices.

The most dangerous consequence of the attack was the blocking of access to emergency services. Due to the interception of the signal, users within the range of the blaster could not make calls to 911. This poses a direct threat to national security and the lives of citizens. Toronto Police Deputy Chief Robert Johnson emphasized that the attack was widespread and did not specifically target individuals or businesses, including all passers-by and residents of the city center.

How smashing works

The detainees used the technology for mass “smashing” — a type of SMS phishing. Once connected to a smartphone, the blaster operator sends messages imitating messages from official entities such as banks or government agencies. At the same time, the alpha name (the name of the organization) is displayed instead of the phone. A short list of the dangers of this technology includes:

• Redirecting users to malicious sites.
• Theft of personal data and accounts.
• Financial fraud under the guise of security checks.

There are also more advanced versions of the equipment, such as IMSI catchers. Unlike basic blasters, IMSI catchers can pass traffic through themselves, allowing attackers to eavesdrop on calls or harvest device metadata. Canadian police said the seized devices were “uniquely designed” and extremely effective.

Features on fighting fraud in Canada and the world

Law enforcement urges citizens to be vigilant, even if the SMS looks like an official message from a well-known brand. Incidents with similar equipment have already been recorded in the Philippines, where Chinese citizens used cars with IMSI-catchers near embassies and military bases. In Canada, the threat was neutralized shortly after its discovery.

Similar methods of radio communication are becoming more and more common. For example, cases of military ships being tracked using Bluetooth trackers were previously recorded, which once again proves the vulnerability of modern communication protocols. The specifics of the Canadian case remain partially classified for now pending further investigation.

Methods of protection

Against attacks of this level, standard antivirus software on smartphones is practically useless, since the vulnerability is at the level of 2G/4G/5G network protocols. The best way to protect yourself is to ignore any links in SMS messages coming from “banks” and use two-factor authentication. Police continue to monitor frequencies in Toronto to prevent repeat attacks.