Using a HackRF to Spoof GPS Navigation in Cars and Divert Drivers

[Nytro]

July 19, 2018

Using a HackRF to Spoof GPS Navigation in Cars and Divert Drivers

Researchers at Virginia Tech, the University of Electronic Science and Technology of China and Microsoft recently released a paper discussing how they were able to perform a GPS spoofing attack that was able to divert drivers to a wrong destination (pdf) without being noticed. The hardware they used to perform the attack was low cost and made from off the shelf hardware. It consisted of a Raspberry Pi 3, HackRF SDR, small whip antenna and a mobile battery pack, together forming a total cost of only $225. The HackRF is a transmit capable SDR.

The idea is to use the HackRF to create a fake GPS signal that causes Google Maps running on an Android phone to believe that it's current location is different. They use a clever algorithm that ensures that the spoofed GPS location remains consistent with the actual physical road networks, to avoid the driver noticing that anything is wrong.

The attack is limited in that it relies on the driver paying attention only to the turn by turn directions, and not looking closely at the map, or having knowledge of the roads already. For example, spoofing to a nearby location on another road can make the GPS give the wrong 'left/right' audio direction. However, in their real world tests they were able to show that 95% of test subjects followed the spoofed navigation to an incorrect destination.

In past posts we've seen the HackRF and other transmit capable SDRs used to spoof GPS in other situations too. For example some players of the once popular Pokemon Go augmented reality game were cheating by using a HackRF to spoof GPS. Others have used GPS spoofing to bypass drone no-fly restrictions, and divert a superyacht. It is also believed that the Iranian government used GPS spoofing to safely divert and capture an American stealth drone back in 2011.

Other researchers are working on making GPS more robust. Aerospace Corp. are using a HackRF to try and fuse GPS together with other localization methods, such as by using localizing signals from radio towers and other satellites.

[Also seen on Arstechnica]

Hardware and Method used to Spoof Car GPS Navigation.

 

Sursa: https://www.rtl-sdr.com/using-a-hackrf-to-spoof-gps-navigation-in-cars-and-divert-drivers/

[gigiRoman]

Rtl-sdr sunt destul de smechere deviceurile.

O sa imi iau si eu unul.

Cu aprox 20$ poti sa prinzi cam toata banda, de la mesajele necriptate de taxi pana la semnalele tv de tip dvb-t. E foarte smecher.

Pe radio daca vrei sa transmiti un ptt ai nevoie de licenta. Altfel esti ilegal.

[davirus]

ai nevoie de ephemere zilnice de o antena calibrata pe frecventa gps cel mai recomandat sa folosesti chiar o antena gps , si un amplificator LNA in banda de frecventa sa acoperi semnalul venit de la sateliti , am testat merge da doar daca dispozitivul foloseste doar GPS si nu si A-GPS sau internet merge si pe windows  https://cddis.nasa.gov/Data_and_Derived_Products/GNSS/broadcast_ephemeris_data.html  https://github.com/osqzss/gps-sdr-sim

[Graphik]

Salut. O utilizare interesanta a dispozitivelor SDR mi se pare receptionarea semnalelor ADS B  Cei din orasele dotate cu aeroport, pot vedea in timp real pozitia avioanelor din zona si alte informatii despre aparatele de zbor.

Semnalul transmis e undeva in zona 1 Ghz