During the Democratic National Convention, a WIRED investigation searched for cell site simulators, potentially used against protesters. No simulators were found, but massive data collection occurred, with signals from nearly 300,000 devices gathered, exposing vulnerabilities. Devices associated with law enforcement and consumer electronics painted a picture of location patterns and posed privacy concerns. The findings underscore the tracking risks inherent in a highly networked society, affecting both law enforcement and civilians during sensitive events.
Source: https://www.wired.com/story/dnc-hidden-signal-hunt/
TPRM report: https://scoringcyber.rankiteo.com/company/wired
"id": "wir001091024",
"linkid": "wired",
"type": "Vulnerability",
"date": "9/2024",
"severity": "60",
"impact": "1",
"explanation": "Attack without any consequences"
{'affected_entities': [{'industry': 'Political',
'name': 'Democratic National Convention',
'type': 'Event'}],
'attack_vector': 'Massive data collection',
'data_breach': {'number_of_records_exposed': 'Nearly 300,000 devices',
'sensitivity_of_data': 'Medium',
'type_of_data_compromised': ['Location patterns',
'Device signals']},
'description': 'During the Democratic National Convention, a WIRED '
'investigation searched for cell site simulators, potentially '
'used against protesters. No simulators were found, but '
'massive data collection occurred, with signals from nearly '
'300,000 devices gathered, exposing vulnerabilities. Devices '
'associated with law enforcement and consumer electronics '
'painted a picture of location patterns and posed privacy '
'concerns. The findings underscore the tracking risks inherent '
'in a highly networked society, affecting both law enforcement '
'and civilians during sensitive events.',
'impact': {'data_compromised': ['Location patterns', 'Device signals']},
'investigation_status': 'Completed',
'lessons_learned': 'The incident highlights the tracking risks inherent in a '
'highly networked society, affecting both law enforcement '
'and civilians during sensitive events.',
'motivation': 'Surveillance and data collection',
'post_incident_analysis': {'root_causes': 'Massive data collection and '
'location tracking vulnerabilities'},
'references': [{'source': 'WIRED'}],
'title': 'Massive Data Collection During Democratic National Convention',
'type': 'Data Collection Incident',
'vulnerability_exploited': 'Location tracking vulnerabilities'}