The Register: Boffins say tool can sniff 5G traffic, launch ‘attacks’ without using rogue base stations

Aug 18, 2025

—

Source URL: https://www.theregister.com/2025/08/18/sni5gect/
Source: The Register
Title: Boffins say tool can sniff 5G traffic, launch ‘attacks’ without using rogue base stations

Feedly Summary: Sni5Gect research crew targets sweet spot during device / network handshake pause
Security boffins have released an open source tool for poking holes in 5G mobile networks, claiming it can do up- and downlink sniffing and a novel connection downgrade attack – plus “other serious exploits" they’re keeping under wraps, for now.…

AI Summary and Description: Yes

Summary: The text discusses the release of an open-source tool aimed at exploiting vulnerabilities in 5G mobile networks. This tool is designed to execute up- and downlink sniffing as well as a novel connection downgrade attack, raising significant concerns for security professionals involved in network security and telecommunications.

Detailed Description: The announcement by the Sni5Gect research crew highlights a critical area of concern in modern telecommunications security, particularly in the context of 5G networks. The development of this open-source tool signifies several key points that security and compliance professionals should closely examine:

– **Open Source Tool**: The availability of the tool as open-source means that it can be freely accessed, modified, and potentially used by both ethical hackers and malicious actors. This raises questions about the security posture of 5G networks.

– **Vulnerability Focus**:
– **Up- and Downlink Sniffing**: This capability allows attackers to intercept and eavesdrop on data being transmitted to and from devices, posing a significant threat to user privacy and data confidentiality.
– **Connection Downgrade Attacks**: This novel method appears to exploit existing protocols to force devices into less secure modes of operation, making them more susceptible to further attacks.

– **Pending Exploits**: The mention of “other serious exploits” that remain undisclosed indicates that the tool could include additional vulnerabilities that have yet to be revealed, suggesting a potentially wide-ranging impact on network security.

– **Implications for Security**: This tool’s engineering emphasizes the necessity for ongoing vigilance, threat assessments, and timely patching in 5G infrastructure to mitigate risks associated with these newly discovered vulnerabilities.

– **Impact on Compliance and Governance**: Telecommunications companies must evaluate their compliance with regulations and governance frameworks to ensure that they are adequately protected against such exploits, particularly in light of data protection laws.

Overall, the emergence of this open-source tool necessitates an immediate response from security professionals to assess and strengthen their defenses against attacks targeting 5G networks, emphasizing the intersection of cloud and infrastructure security concerns in an increasingly interconnected world.

1 2 2025 5 5G 5G networks a access Act AI All and app Arch art as assessment assessments at ated attack attacker attackers attacks availability AWS being Bi by C capability CERN CI CIA closed Cloud co Col communication Communications. companies compliance compliance and governance compliance professionals concerns confidentiality connection downgrade attacks Context crew critical D data data confidentiality Data Protection data protection laws de defense defenses design development device downgrade attack downgrade attacks e end Engineer engineering ethical ethical hacker exp exploit exploits for framework frameworks free g Gen GIS Go governance governance framework governance frameworks grade H hack hacker hackers hands handshake high Highlight HR http HTTPS impact implications implications for security in infrastructure infrastructure security inter io k keeping Key l Lance law led Li Link low M making Malicious Actor malicious actors mean media Mobile Mode Modern ModI N network network security networks new NGO no o of off on ons open open source tool open-source operation OPM oS other out over Patch patching per point post potential privacy pro professionals protection protocol protocols ps Q question R Raise raising RCE re red Regulation regulations release research response Risk risks Ro RoT s SD search sec secure security security and compliance security concerns security posture security professionals SHA Sig size sizes SoC source source tool SSE SSO Station T ted telecom telecommunications telecommunications security text the threat threat assessment Time to tool Tor TP traffic two under up US use user user privacy V val vigilance vulnerabilities vulnerability Well Wi world x z