Caller ID spoofing
by blackhatgk on Feb.24, 2004, under My personal dribble
Well, after watching the screen savers tonight and seeing Kevin Mitnick spoof caller id live on the set with his cell phone I felt like I needed to try it. I tried quite a few of the tricks but they didn’t work from a cell phone. Some of the most popular ones are the Vonage call waiting trick where you call a PSTN number and then put them on hold and call another number, that will allow you to assume the identity of the number you dialed. There are all of the people who seem to think he used an “Orange Box” to do this but I think it’s something simpler than that. If anything, I think he probably used an insecure PBX system, maybe his own at his company, to fake the caller id number. Especially since he used no social engineering on the show.
There is an alternative though…
It is possible that you could hack the phone number stored on the phone and this might be able to be used on an out of network provider as your phone number.. I haven’t tried to hack my nokia yet though to see if this is possible, but I don’t see how he would have been able to do it so quickly on the show if that was how he was doing it.
If anyone knows any “Real” ways to do this, that they personally have used, and aren’t just urban legends, post them…
