LTrack: Stealthy Tracking of Cell Phones in LTE

LTrack: Stealthy Tracking of Cell Phones in LTE


Martin Kotuliak, Simon Erni, Patrick Leu, Marc Röschlin, and Srdjan Čapkun, ETH Zurich


We introduce LTrack, a recent tracking assault on LTE that enables an attacker to stealthily extract user devices’ locations and permanent identifiers (IMSI). To remain stealthy, the localization of devices in LTrack is fully passive, counting on our contemporary uplink/downlink sniffer. Our sniffer data each the cases of arrival of LTE messages and the contents of the Timing Reach Instructions, per which LTrack calculates locations. LTrack is the first to keep the feasibility of a passive localization in LTE through implementation on machine-outlined radio.

Passive localization assaults show a user’s enviornment traces but can at handiest link these traces to a machine’s pseudonymous non permanent identifier (TMSI), making tracking in dense areas or over a lengthy time-duration traumatic. LTrack overcomes this remark by introducing and enforcing a recent trend of IMSI Catcher named IMSI Extractor. It extracts a machine’s IMSI and binds it to its latest TMSI. In desire to counting on fake unhappy stations love existing IMSI Catchers, which are detectable attributable to their valid transmission, IMSI Extractor relies on our uplink/downlink sniffer enhanced with surgical message overshadowing. This makes our IMSI Extractor the stealthiest IMSI Catcher to this level.

We keep in thoughts LTrack through a sequence of experiments and keep that in line-of-watch conditions, the attacker can estimate the placement of a phone with out a longer up to 6m error in 90% of the cases. We efficiently tested our IMSI Extractor in opposition to a location of 17 contemporary smartphones linked to our trade-grade LTE testbed. We further validated our uplink/downlink sniffer and IMSI Extractor in a test facility of an operator.

Initiate Entry Media

USENIX is dedicated to Initiate Entry to the overview presented at our events. Papers and proceedings are freely available to all americans as soon as the tournament begins. Any video, audio, and/or slides which are posted after the tournament are also free and begin to all americans. Strengthen USENIX and our dedication to Initiate Entry.

Read More



β€œSimplicity, patience, compassion.
These three are your greatest treasures.
Simple in actions and thoughts, you return to the source of being.
Patient with both friends and enemies,
you accord with the way things are.
Compassionate toward yourself,
you reconcile all beings in the world.”
― Lao Tzu, Tao Te Ching