The Stingray/ GSM call interceptor/IMSI catcher is equipment that can gather data from hundreds of phones over targeted areas and they can also perform denial-of-service attacks on phones and intercept conversations. Though these products are not available legally but they can be bought through black markets or through deep web.
Law enforcement and the military use these devices to track cellphones. A stingray system involves an antenna, maps, and a signal device. The device mimics as a cellphone tower Base Transmitting Stations (BTS) and gets the phones in the area to connect to it. Then it collects International Mobile Subscriber Number (IMSI) and the Electronic Serial Number (ESM) numbers associated with the phone and can connect any phone.
There are two ways to use the devices, says Mike Stevens, a mobile ethical hacking training expert of International Institute of Cyber Security.
One way is to use antenna in a given area to collect International Mobile Subscriber Number (IMSI) and the Electronic Serial Number (ESN) numbers of mobile phones in that area and see who is in that given area.
Second way is to locate a mobile phone with IMEI, International Mobile Subscriber Number (IMSI) and the Electronic Serial Number (ESM) number like apple Find my phone application but in this case the phone can be traced even if the phone is formatted, as IMEI remain associated with the hardware not the software. Based on the signal strength of the device you can find the exact location of the mobile phone.
Also in some cases a DOS attack can be done on mobile phone but in terms of GSM signal not in term so of Data packets. When under DOS attacks the phone cannot receive or make any calls.
These devices can be used with software to eavesdrop on mobile phone conversations and spoof calls and SMS. These softwares are known as Over-The-Air special signal software like FISHHAWK, PORPOISE.
These devices are also knows as GSM INTERCEPTOR OR IMSI CATCHER. There are various devices like these in the market easily available. James Taylor mobile information security course expert, mentioned some of them like GOSSAMER, LONGSHIP, BLACKFIN, BLACKFIN II, HAWKSBILL, SPURDOG, FISHFINDER, KINGFISH, STINGRAY, STINGRAY II, GSM INTERROGATOR, CDMA INTERROGATOR, IDEN INTERROGATOR, UMTS INTERROGATOR, FISHHAWK, PORPOISE, FIREFISH, TARPON, AMBERJACK, HARPOON, MORAY, LANTERNEYE, RAYFISH, STONECRAB.
The Gossamer is a small portable device that is similar to stingray and can gather data on mobile phones operating in a target area. The Gossamer device is much smaller than stingray, it can be used to perform a denial-of-service attack on phone users, blocking targeted people from making or receiving calls. As per analysts from the information security industry, the approximate cost of Gossamer type devices in black market is 10,000 to 20,000 USD depending upon the state of device and features of the device in counties like Mexico, Brazil and Argentina.
The Triggerfish is an eavesdropping device. With it anybody can intercept calls, messages in real time in the targeted area. It allows all the functions of stingray. Some advance Russian versions of Triggerfish can intercept calls, SMS of 10,0000 mobile phones in the targeted area of city.
The Kingfish is a device that allows anybody to track and analyze information from mobile phones over a targeted area. It is smaller stingray devices but it can give you the list of connections between different phones. This device can be controlled wirelessly to monitor communications.