aLTEr: POC Exploit of LTE Layer Two

This Zimperium blog summarizes academic research showing weaknesses in LTE’s lower layers that allow passive identity mapping and website fingerprinting and an active DNS-spoofing attack dubbed “aLTEr” which manipulates encrypted packets to redirect users to malicious sites; the post notes the attack is technically feasible in controlled settings but difficult to perform in the real world, and describes how Zimperium’s zIPS/z9 engines can detect and mitigate related phishing and exploitation attempts.