Phone hacking
Encyclopedia
Phone hacking is a term used to describe the practice of intercepting telephone calls or voicemail messages, often by accessing the voicemail
messages of a mobile phone
without the consent of the phone's owner. The term came to prominence during the News International phone hacking scandal, in which it was alleged (and in some cases proved in court) that the British tabloid newspaper the News of the World
had been involved in the interception of voicemail messages of the British Royal Family
, other public figures, and the murdered schoolgirl Milly Dowler.
telephone, requiring the entry of a Personal Identification Number (PIN)
to listen to the messages. As many mobile phones were supplied with a factory default PIN that was rarely changed by the owner, it was easy for a person who knew the phone number and the default PIN to access the voicemail messages. Following controversies over phone hacking, some mobile phone companies have changed their systems so that remote access to voicemail messages and other phone settings cannot be achieved via a factory default PIN.
Caller ID spoofing
allows a caller to pretend that a call has been made from another number. During the mid-2000s, it was discovered that this would allow unauthorized access to the voicemail on some mobile phone networks, as calls that spoofed the number of the handset were put straight through to voicemail without the need for a PIN code to be entered.
An analysis of PIN codes suggested that ten numbers represent 15% of all iPhone
passcodes, with "1234" and "0000" being the most common, with years of birth and graduation also being common choices. To prevent hacking, some mobile phone companies disallow the use of consecutive or repeat digits in PIN codes.
Social engineering
may be used to reset the PIN code to the factory default, by impersonating the owner of the phone during a call to a call centre
.
Other techniques for phone hacking include tricking a mobile phone user into downloading malware
which monitors activity on the phone, or bluesnarfing
, which is unauthorized access to a phone via Bluetooth
.
There are also flaws in the implementation of the GSM encryption algorithm
which allow passive interception. The equipment needed is available to government agencies or can be built from freely available parts.
, and is illegal in many countries unless it is carried out as lawful interception
by a government agency. In the News International phone hacking scandal, private investigator Glenn Mulcaire
was found to have violated the Regulation of Investigatory Powers Act 2000
. He was sentenced to six months in prison in January 2007. Renewed controversy over the phone hacking claims led to the closure of the News of the World
in July 2011.
In December 2010, the Truth in Caller ID Act was signed into United States law
, making it illegal "to cause any caller identification service to knowingly transmit misleading or inaccurate caller identification information with the intent to defraud, cause harm, or wrongfully obtain anything of value."
Voicemail
Voicemail is a computer based system that allows users and subscribers to exchange personal voice messages; to select and deliver voice information; and to process transactions relating to individuals, organizations, products and services, using an ordinary telephone...
messages of a mobile phone
Mobile phone
A mobile phone is a device which can make and receive telephone calls over a radio link whilst moving around a wide geographic area. It does so by connecting to a cellular network provided by a mobile network operator...
without the consent of the phone's owner. The term came to prominence during the News International phone hacking scandal, in which it was alleged (and in some cases proved in court) that the British tabloid newspaper the News of the World
News of the World
The News of the World was a national red top newspaper published in the United Kingdom from 1843 to 2011. It was at one time the biggest selling English language newspaper in the world, and at closure still had one of the highest English language circulations...
had been involved in the interception of voicemail messages of the British Royal Family
British Royal Family
The British Royal Family is the group of close relatives of the monarch of the United Kingdom. The term is also commonly applied to the same group of people as the relations of the monarch in her or his role as sovereign of any of the other Commonwealth realms, thus sometimes at variance with...
, other public figures, and the murdered schoolgirl Milly Dowler.
Techniques
Since the early days of mobile phone technology, mobile phones have allowed access to voicemail messages via a landlineLandline
A landline was originally an overland telegraph wire, as opposed to an undersea cable. Currently, landline refers to a telephone line which travels through a solid medium, either metal wire or optical fibre, as distinguished from a mobile cellular line, where transmission is via radio waves...
telephone, requiring the entry of a Personal Identification Number (PIN)
Personal identification number
A personal identification number is a secret numeric password shared between a user and a system that can be used to authenticate the user to the system. Typically, the user is required to provide a non-confidential user identifier or token and a confidential PIN to gain access to the system...
to listen to the messages. As many mobile phones were supplied with a factory default PIN that was rarely changed by the owner, it was easy for a person who knew the phone number and the default PIN to access the voicemail messages. Following controversies over phone hacking, some mobile phone companies have changed their systems so that remote access to voicemail messages and other phone settings cannot be achieved via a factory default PIN.
Caller ID spoofing
Caller ID spoofing
Caller ID spoofing is the practice of causing the telephone network to display a number on the recipient's Caller ID display that is not that of the actual originating station. The term is commonly used to describe situations in which the motivation is considered malicious by the speaker or writer...
allows a caller to pretend that a call has been made from another number. During the mid-2000s, it was discovered that this would allow unauthorized access to the voicemail on some mobile phone networks, as calls that spoofed the number of the handset were put straight through to voicemail without the need for a PIN code to be entered.
An analysis of PIN codes suggested that ten numbers represent 15% of all iPhone
IPhone
The iPhone is a line of Internet and multimedia-enabled smartphones marketed by Apple Inc. The first iPhone was unveiled by Steve Jobs, then CEO of Apple, on January 9, 2007, and released on June 29, 2007...
passcodes, with "1234" and "0000" being the most common, with years of birth and graduation also being common choices. To prevent hacking, some mobile phone companies disallow the use of consecutive or repeat digits in PIN codes.
Social engineering
Social engineering (security)
Social engineering is commonly understood to mean the art of manipulating people into performing actions or divulging confidential information...
may be used to reset the PIN code to the factory default, by impersonating the owner of the phone during a call to a call centre
Call centre
A call centre or call center is a centralised office used for the purpose of receiving and transmitting a large volume of requests by telephone. A call centre is operated by a company to administer incoming product support or information inquiries from consumers. Outgoing calls for telemarketing,...
.
Other techniques for phone hacking include tricking a mobile phone user into downloading malware
Malware
Malware, short for malicious software, consists of programming that is designed to disrupt or deny operation, gather information that leads to loss of privacy or exploitation, or gain unauthorized access to system resources, or that otherwise exhibits abusive behavior...
which monitors activity on the phone, or bluesnarfing
Bluesnarfing
Bluesnarfing is the unauthorized access of information from a wireless device through a Bluetooth connection, often between phones, desktops, laptops, and PDAs. This allows access to a calendar, contact list, emails and text messages, and on some phones users can copy pictures and private videos...
, which is unauthorized access to a phone via Bluetooth
Bluetooth
Bluetooth is a proprietary open wireless technology standard for exchanging data over short distances from fixed and mobile devices, creating personal area networks with high levels of security...
.
There are also flaws in the implementation of the GSM encryption algorithm
A5/1
A5/1 is a stream cipher used to provide over-the-air communication privacy in the GSM cellular telephone standard. It was initially kept secret, but became public knowledge through leaks and reverse engineering. A number of serious weaknesses in the cipher have been identified.-History and...
which allow passive interception. The equipment needed is available to government agencies or can be built from freely available parts.
Legality
Phone hacking is a form of surveillanceSurveillance
Surveillance is the monitoring of the behavior, activities, or other changing information, usually of people. It is sometimes done in a surreptitious manner...
, and is illegal in many countries unless it is carried out as lawful interception
Lawful interception
Lawful interception is obtaining communications network data pursuant to lawful authority for the purpose of analysis or evidence. Such data generally consist of signalling or network management information or, in fewer instances, the content of the communications...
by a government agency. In the News International phone hacking scandal, private investigator Glenn Mulcaire
Glenn Mulcaire
Glenn Mulcaire, born September 8, 1970, is a former professional footballer, latterly a private investigator. He has been closely associated with the News International phone hacking scandal. In January 2007 he was found guilty of illegally intercepting phone messages from Clarence House and...
was found to have violated the Regulation of Investigatory Powers Act 2000
Regulation of Investigatory Powers Act 2000
The Regulation of Investigatory Powers Act 2000 is an Act of the Parliament of the United Kingdom, regulating the powers of public bodies to carry out surveillance and investigation, and covering the interception of communications...
. He was sentenced to six months in prison in January 2007. Renewed controversy over the phone hacking claims led to the closure of the News of the World
News of the World
The News of the World was a national red top newspaper published in the United Kingdom from 1843 to 2011. It was at one time the biggest selling English language newspaper in the world, and at closure still had one of the highest English language circulations...
in July 2011.
In December 2010, the Truth in Caller ID Act was signed into United States law
Law of the United States
The law of the United States consists of many levels of codified and uncodified forms of law, of which the most important is the United States Constitution, the foundation of the federal government of the United States...
, making it illegal "to cause any caller identification service to knowingly transmit misleading or inaccurate caller identification information with the intent to defraud, cause harm, or wrongfully obtain anything of value."
External links
- Timeline: News of the World phone-hacking row, BBC NewsBBC NewsBBC News is the department of the British Broadcasting Corporation responsible for the gathering and broadcasting of news and current affairs. The department is the world's largest broadcast news organisation and generates about 120 hours of radio and television output each day, as well as online...
, 5 July 2011 - Full Q&A On The Phone Hacking Scandal, Sky NewsSky NewsSky News is a 24-hour British and international satellite television news broadcaster with an emphasis on UK and international news stories.The service places emphasis on rolling news, including the latest breaking news. Sky News also hosts localised versions of the channel in Australia and in New...
, 5 July 2011 - Anatomy of the Phone-Hacking Scandal, The New York TimesThe New York TimesThe New York Times is an American daily newspaper founded and continuously published in New York City since 1851. The New York Times has won 106 Pulitzer Prizes, the most of any news organization...
, 1 September 2010 - The Rise of Caller ID Spoofing, The Wall Street JournalThe Wall Street JournalThe Wall Street Journal is an American English-language international daily newspaper. It is published in New York City by Dow Jones & Company, a division of News Corporation, along with the Asian and European editions of the Journal....
, 5 February 2010 - Phone hacking: Are you safe?, Rory Cellan-JonesRory Cellan-JonesNicholas Rory Cellan-Jones is a British journalist for BBC News, specializing in economics and technology. His brother is television director Simon Cellan-Jones.-Education:...
, BBC NewsBBC NewsBBC News is the department of the British Broadcasting Corporation responsible for the gathering and broadcasting of news and current affairs. The department is the world's largest broadcast news organisation and generates about 120 hours of radio and television output each day, as well as online...
, 12 July 2011