TRUECALLER GOLD MINE FOR OSINTERS/SCAMMERS/Marketers + OSINT MOBILE NUMBERS + Caller ID Spoofing (Illegal in India) + Dangers of data and a worry for where humanity is heading (Destruction?)
Running a Indian mobile number word dictionary through truecaller should give more than enough info for a scammer or we should be able to, by the countless name + number + maybe you got email too for truecaller osint more info,
heck we could have a automated osint pipeline! where we just put a numbe rdictionary of airtel madhya pradesh and it builds a osint database.
Heck I could sell this osint pipeline to companies for advanced number list attacks.
heck I think companies already do this.
I could include twiite, instagram's a=1 api, facebook's vulnerable api and snapchat's heatmap.
This could be a very bad idnnetity theft combined with some pics and a call recording and tacotron 2 and deepfake.
And specially with the ever increasing virtual communication this could become a very serious identity theft concern and easy to setup fake accounts in name of someone else,
specially with meme culture one could gain the verified tick somehow through memes, wipe the account and impersontate someone and be the better one due to the blue tick.
I am worried for what DATA hass become and where humanity is headed.
JUST READ THE WIKIPEDIA CALL SPOOFING ARTICLE
Best compilation of Osint phone number tools goes to ka forensics
https://ka4n6.com/research/res1.html
TRUECALLER IS GOLD MINE FOR OSINT IN PHONE NUMBERS
DOES IT MAKE IT'S DATABASE PUBLIC?
IT REALLY IS THE GOLDMINE FOR ANY OSINTER!!!!
MANY SCAM COMPANIES THAT MASS MESSAGE USE TRUECCALLER TO KNOW YOUR NAME!!!
some us based tools
https://www.aware-online.com/en/osint-tools/phone-number-tools/
Note that under IT act in India, Caller ID spoofing is illegal now and should not be attempted.
(you can still learn the technicalities and try in simulated environments to better understand the shortcomings of GSM system)
Note that the govt. might be implementing some STIR/SHAKEN Algoritham too, to track malicious robocall intents.
THIS IS NOT LEGAL ADVICE AND I HAVE NO LIABILITY TO NEITHER YOU NOR WHATEVER YOU DO WITH THIS TEXT.
ALSO NOTE THAT THESE ARE EASILY TEACEABLE THROUGH THE SERVICE PROVIDER COMPANY, SO DONT DO STUPID STUFF WITH THIS. (actually I'd advice stay away from this, just learn about gsm system from here and go away, be a lawful citizen)
Also I found this app called spyine, IDK if it's legal or not but all I know is I would stay away.
http://www.spooftel.com/freecall/index.php & https://www.numlookup.com/
This and countless other spoof calls websites have been blocked by the govt. of India under IT act. OK!
Spoof calling still exists and may use VPN or other tech
Find out more
BUT ANY CALL app still works somehow, I did some proxy stuff (installed CA cert and RE'ed websocket calls and GET/POST http reqs)and found out it was contacting some teddy mobile telecom authority or something like that.
They somehow managed to get past govt. of India's restrictions, IDK how caller id spoofing works but yeah it's definitley possible to bypass stuff when you setup your own services.
Caller ID spoofing + tacotron 2 is baically the recipe for Identity theft.
Also video calls can be defeated by ultra realistic deep-fakes.
And the ANY CALL I am sure uses GSM protocol not VOIP because it manages to make calls to those parties too which don't have the app installed on their phones, so it is basically call spoofing, unlike other VOIP based apps like whatsapp etc.
Also just read the wikipedia article it's more than enough to get you understanding
en.wikipedia.org/wiki/Caller_ID_spoofing
to get service name (like sim provider name and stuff) use
tracemobile.dialtonez.com
and for more OSINT (name and stuff)
you can only find out that in India if the user himself has shared their information
(otherwise try different osints, intagram.com/userName/?__a=1 etc. snapchat heat map, facebooks http get reqs)
Note that :- (unless they do it their selves like on TRUECALLER and similar stuff)
- Public sharing of name and address details of a sim holder through website is crime in India.
Wikipedia cited:-
Technology and methods[edit]
Caller ID is spoofed through a variety of methods and different technology. The most popular ways of spoofing caller ID are through the use of VoIP or PRI lines.
Citations
1) https://surajmdurgad.medium.com/phone-number-spoofing-in-india-233275c07de1
2)
Comments
Post a Comment