Exfiltration

Exfiltration in context

Subscriber identifiers (IMSI, SUPI, MSISDN, IMEI) are the anchor for authentication, charging, lawful interception and fraud analytics. Any protocol or interface that leaks a permanent identifier is treated as a serious privacy defect, which is why 5G introduced SUCI concealment on the air interface.

Telecom threats range from opportunistic SMS phishing and SIM swap to nation-state grade location tracking and lawful-interception abuse. The common thread is that most attacks exploit the inherited trust model of legacy signaling. SS7 and Diameter were designed for a closed operator community that no longer exists.

To place Exfiltration in the wider telecom-security picture, review Malware, UDR, Egress, Event Logging, Insider Threat and Robocalling.

Related terms

• Malware
• UDR
• Egress
• Event Logging
• Insider Threat
• Robocalling
• Wangiri Fraud
• Artificial Traffic Inflation

Related topic hubs

• Diameter Attacks S6a IDR/PUR/CLR abuse, subscriber tracking, LTE signaling attacks.
• Diameter Security 4G/LTE Diameter threats across IPX/roaming and DEA defenses.
• LTE Security Training Training on 4G/LTE core, Diameter, NAS and RRC security.
• Tracking Area Update LTE TAU procedure and its signaling risks.

More from the TelcoSec Glossary

Browse the full TelcoSec Glossary, the Ultimate Guide to Mobile Network Security, or the P1 Arsenal of telecom-security tools.