Since its launch just over a year ago, Rayhunter, an open-source tool designed to detect cell site simulators, has captured the attention of the community. With thousands of installations on devices around the world, it has become an example of the positive impact of collaborative software. Although it lacks telemetry features, users have contributed numerous reports on operational improvements and documentation corrections.
The main function of Rayhunter is to identify cell site simulators, known as Catchers or Stingrays, used by law enforcement to locate or identify mobile phones. The software, which operates on a variety of mobile hotspot devices, analyzes the “connections” between the equipment and cell towers, detecting anomalous behaviors that may indicate the presence of these surveillance tools. When suspicious signals are detected, the application alerts the user through visual and auditory notifications.
One of the primary goals of the project is to understand the use of cell site simulators during protests in the U.S. While data has been collected on significant events, no evidence has yet been found of their use for spying on demonstrations in the country, although their use has been reported in other contexts.
The current legal framework may influence the scarcity of surveillance tools. Several court rulings have established that a warrant is required to use these devices, which may deter some agencies from implementing them. Additionally, the high cost and the need for trained personnel to operate these systems further complicate their use.
Despite the lack of evidence that might lead some to downplay the threat of cell site simulators, there are other surveillance techniques that law enforcement may employ, such as license plate readers, phone location data, and forensic extraction tools that allow valuable information to be gathered from confiscated devices.
Users of Rayhunter have reported suspicious detections in areas like Chicago and New York, although not in the context of protests, suggesting discreet surveillance in various situations. The community has been instrumental in the evolution of Rayhunter, providing data and feedback that have enriched its knowledge base.
The future of Rayhunter appears promising, with plans for expansion into an international context and the pursuit of data to better understand the use of cell site simulators worldwide. The community is encouraged to continue using and improving the tool to be better prepared for any eventuality in the field of surveillance.
Referrer: MiMub in Spanish