Have you ever received a suspicious SMS asking for your personal information? Imagine an entire network of cybercriminals exploiting technology to carry out this scam on a large scale. That’s exactly what happened in the streets of Paris, where an organized team managed to deceive dozens of citizens through an ingenious scheme. Let’s discover how this fraud was orchestrated and stopped by the authorities.
The 3 key facts not to miss
- Seven people were convicted for an SMS scam using sophisticated technological equipment.
- The main tool, an IMSI catcher, mimics a cell tower to send fraudulent SMS without going through telephone operators.
- The investigation revealed a well-structured network, with the supplier of the machines based in China.
The judgment and its implications
On March 13, the Paris criminal court convicted six men and one woman for their role in an elaborate high-tech fraud. Among them, Abdoulaye Koné and Mohamed Mhadebi received sentences of five years in prison, while other members were sentenced to terms ranging from six months suspended to two years in prison.
Yin Nongzhong, identified as the supplier of the machines used for this fraud, was arrested in Switzerland and sentenced to four years in prison. His role was crucial, as he provided the necessary equipment to carry out these attacks.
The technology behind the scam
The central tool of this scam was the IMSI catcher, a device that comes in the form of a portable box. This device can be concealed in a car and mimics a cell tower. Phones within its range automatically connect to this fake signal, allowing scammers to send fraudulent SMS directly to victims.
When these devices were in operation, the messages appeared to come from familiar services, prompting victims to share sensitive personal information. This method allowed the criminals to operate without leaving traces in the systems of telephone operators.
The hunt and arrest
The investigation began at the end of 2022, after Orange reported anomalies on the phones of some of its subscribers. A traffic stop then led to the discovery of an IMSI catcher in a car, which led investigators to trace the trail of this organized scam.
Law enforcement had to cross technical data with field observations to identify and arrest the members of the network. The equipment moved from vehicle to vehicle, complicating its location. However, the efficiency of the investigations made it possible to trace back to the Chinese supplier of the devices.
About IMSI catchers and cyberattacks
IMSI catchers are used by law enforcement and intelligence services for legal surveillance operations. However, their misuse by cybercriminals for scams demonstrates the risks associated with this technology.
Similar incidents have been reported elsewhere, where groups have used advanced technologies to target individuals on a large scale. Competitors in the field of cyberattacks include ransomware and email phishing attacks, which also exploit vulnerabilities to access sensitive information.
