P1 Security is working with mobile operators worldwide, and therefore requires a good knowledge of identifiers used in mobile networks. The P1 Lab has worked carefully to identify all public information related to this topic, and is publishing a new open-source library called MCC_MNC that enables to download and compile them into few comprehensive dictionaries.
The Mobile Country Code (MCC) and Mobile Network Code (MNC) are primarily used to identify mobile operators. Some identifiers, such as phone numbers (or Mobile Station ISDN Number, i.e. MSISDN), SS7 global titles and signaling point codes, are also commonly used when dealing with routing of mobile communication in an international context. Finally, having precise information related to geographic aspects (such as country name, alpha-code-2, borders and near-by countries) can help when dealing with signaling patterns related to roaming subscribers.
The library provided can be used out-of-the-box, by importing the JSON or Python dictionaries available in the gen/ directory of the project. Following is an example of a common investigation that can be done by an operator when looking for potentially fraudulent international signaling exchanges…
In most of those investigation cases, the starting point is an MCC-MNC (being it taken from an IMSI, or a Diameter realm). Let’s use Python to illustrate the use of the dictionaries:
Now, imagine we identify several mobility procedures for a given subscriber between this mobile network in Venezuela, identified with MCC-MNC 734-04, and another mobile network, identified with MCC-MNC 363-01, in a limited time-frame. Does it look legitimate ? Let’s check with our geographical dataset.
Here, we find that Aruba, which is actually part of Kingdom of the Netherlands, has no border (this is an island), but is less than 30 kilometers from Venezuela. This makes GSM subscriber relocation legitimately possible.
And this is only a little example on how to use this dataset ! Being able to identify legitimate or plausible mobility events for … Read More