5G-Shark Lures Phones to Rogue 5G Cells Without Network Jamming
Researchers develop 5G-Shark to lure phones to rogue 5G cells and collect subscriber IDs.
Researchers have developed a new tool called 5G-Shark that can lure mobile phones onto rogue 5G base stations without jamming legitimate networks. This allows attackers to collect subscriber IDs and force network downgrades, potentially enabling further attacks. The technique bypasses existing security measures designed to detect jamming.
AI summary of the linked source. Not reviewed by an editor. How this works
Run 5G-Shark?
Get an email when a new story names 5G-Shark, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe 5G-Shark tool exploits weaknesses in how mobile devices authenticate and connect to 5G base stations, allowing attackers to silently lure phones onto malicious cells without triggering jamming-detection defenses. By harvesting subscriber IDs (IMSIs/SUPIs) and forcing protocol downgrades to less secure generations (e.g., 4G/3G), attackers can enable eavesdropping, location tracking, and man-in-the-middle attacks. This matters because the attack is passive enough to evade current countermeasures, placing millions of devices at risk in public spaces. The vulnerability highlights a fundamental gap in mutual authentication and signal-anomaly detection within current 5G deployments.
What helps against this
How we list vendors- Network detection and response (NDR)
Attackers moving between systems inside the network get seen.
- Threat intelligence
Attack campaigns reach your sector, suppliers or software before your team hears about them.