[johnripper]

Telegram and WhatsApp are both known for their security and end-to-end encryption and latest forward way secrecy techniques which secure end user data in a good manner. All these security features still doesn’t stop hackers from Hacking into WhatsApp or Telegram using a very known and old exploit of Signaling System 7 (SS7) .

SS7 Exploitation has been discussed many time in the Forum , In this post I will just show you the Live Hack Demo and how accounts are taken over. Check out the Video Demo of WhatsApp hacking (Telegram Technique is also SAME )
video link:
https://youtu.be/qPPWQbGTptQ
How the Hack is executed ?
Above demonstrated hack DOES NOT break WhatsApp and Telegram Encryption rather it exploits the weakness of SS7. This is done by tricking the cellular network into believing that the Attacker’s phone has the same number as the target’s. From there, the attacker would create a new WhatsApp or Telegram account and receive the secret code that authenticates their phone as the legitimate account holder. Keep in mind this technique would literally work on any Network and any Online Messaging Service , once you spoof the number you can pretty much do everything.

Will SS7 Vulnerability get Fixed ?
SS7 is a global network and not owned by any particular company, nor it can be rapidly patched through out the world. It’s a mess, and it’ll remain that way until someone, or a group, is appointed to govern and maintain it, which is very unlikely to happen
Until then, Hackers will Enjoy .

Another theory hints that intelligence agencies are the real cause between the vulnerability and Cellular networks ability to fix it. Having a weakness to spoof and clone every phone on the planet is a very eye candy option for all Intelligence Agencies which would not think for a second before invading our privacy.

Update :

Download MAPS and SS7 Protocol Simulator
Open GL.com and register for a Free Account
Activate your account by clicking the Email received.
Once account activated visit This Link
Download MAPS™ SS7 Protocol Emulator and MAPS™ SS7 SIGTRAN
Usage you will have to understand .

[SaintAres]

So this is working? Thanks for the post.

[Dr. Michio Kaku™]

Can you help me better on that?
Like setting things up and all over skype or here.
Thanks for sharing!

[Mr. Corleone]

It's easy to catch someone using this, so i'd be careful if you can even set this up.
Good luck, lol.

[oppkern]

Thank you for sharing this, but

not really useful...
1. After the hack the attacker cannot read the past messages, cause they are saved on victims phone.
2. The victim sees that he/she was disconnected and will reconnect again and the attacker lose control, etc...

The only gain, is that the attacker can see and write in the meantime to the contacts of the victim.

[Dr. Michio Kaku™]

Thank you for sharing this, but

not really useful...
1. After the hack the attacker cannot read the past messages, cause they are saved on victims phone.
2. The victim sees that he/she was disconnected and will reconnect again and the attacker lose control, etc...

The only gain, is that the attacker can see and write in the meantime to the contacts of the victim.

Oh really! Thanks for sharing with us.
I tried to download Download MAPS™ SS7 Protocol Emulator and MAPS™ SS7 SIGTRAN, but it required a key before you can download.

[johnripper]

Ss7 chould be difficult to setup and use ......

[oppkern]

Oh really! Thanks for sharing with us.
I tried to download Download MAPS™ SS7 Protocol Emulator and MAPS™ SS7 SIGTRAN, but it required a key before you can download.

try to find a key on youtube.

[iUpgrade]

That's a fake video, did you saw the call in the victim's cellphone or an sms?
Most likely he used 3 cellphones to fool us,
1. Victim's phone
2. Friends phone
3. Hacker phone

He already had a verified whatsapp account in 1st phone, then he took out the simcard and inserted it into the other phone (3rd one) and
the part where he claims to forward the call is just for making us fool because he had the same number simcard (victims) into his hacker cellphone (3rd) and that's why he received the call on hacker cellphone.
If it was real, tell me why there was no call or sms on the original victims simcard?

[10RD]

Doesn't we need hardware to exploit ss7 flaw?

[wapfalls]

This is cool, and seems legit,
will check this out.

[Fantom4242]

This is an interesting exploitation, I'll stick to this thread for future reference

[johnripper]

This is an interesting exploitation, I'll stick to this thread for future reference

Yeah ,but difficult to set it up

[citscloud]

Thanks for Sharing this....

[Jared96]

I'm not that advanced, did anyone who tested it out find a way to make it work?
Everyone keeps saying "I will test it out" and then disappears :O