SnoopSnitch¶

SnoopSnitch is an Android app that collects and analyzes mobile radio data to make you aware of your mobile network security and to warn
you about threats like fake base stations (IMSI catchers), user tracking and over-the-air updates. With SnoopSnitch you can use the data collected in the GSM Security Map at gsmmap.org and contribute your own data to GSM Map.

This application currently only works on Android phones with a Qualcomm chipset and a stock Android ROM. It requires root priviliges to capture mobile network data.

Requirements:¶

• Qualcomm-based Android phone (see list below)
• Stock Android ROM
  Note: Unfortunately, custom Android ROMs like CyanogenMod are not supported, as they lack the drivers necessary to collect radio data.
• Root privileges on phone

Tested Devices:¶

The following devices have been verified to work:

• Samsung S3 Neo (GT-I9301I)
• LG G2 (LG-D802)
• Sony Xperia Z1 (C6903)
• Samsung S5 (SM-G900F)
• Motorola Moto E (Moto E)
• Samsung S4 (Qualcomm variant)

It is very likely that other Qualcomm-based Android phones also work, if they are rooted and have a stock firmware.

Download:¶

• Pre-compiled .apk (SHA1: 326728aca3ebbe1061c91e330581b7f72d1b55a5)
• Pre-compiled .apk from Google Play Store
• Source Code:

  git clone https://opensource.srlabs.de:/git/snoopsnitch.git

Disclaimer¶

The tests include an active part. First, your phone will place outgoing calls to a dedicated number. This number will always be busy and never answer in order to rule out voice charges as best as we can.

Second, your phone will send SMS short messages to an invalid number.

In some cases, we saw operators charging for these kind of transactions transactions. Hence, please have an eye on your phone bill when performing active tests using SnoopSnitch.

To control for involuntary charges, we strongly advise the use of a dedicated pre-paid SIM card for these tests.

Instructions¶

1. Make sure you have rooted the phone
2. Install application from Google Play app store or below
3. Run the app, execute active tests, upload security events and suspicious activity

Mailing list¶

A public mailing list for discussions is here

Version history¶

Version 0.9.0

• Initial public release