The Hacks of Mr. Robot: How to Send a Spoofed SMS Text Message « Null Byte :: WonderHowTo

Welcome back, my rookie hackers!As most of you know,Mr. Robotis probably the best hacker TV show ever! This is a great show about a cyber security engineer who is being enticed to hack the very corporation he's being paid to protect. This show is so good, I begana seriesto demonstrate how to do the hacks he uses in the show.The Spoofed Text Message in Episode 5Inepisode 5, when Elliot is able to social engineer his way into the Steel Mountain's state of the art, "impenetrable" storage facility, a manager gets suspicious and begins to escort him out of the building before he can implant the Raspberry Pi (whichwe made in the last guide).He intends to place the RP inside the network to manipulate the HVAC system to raise the temperature in the storage facility and destroy the tapes that contain the records of 70% of the world's consumer debt, including student loans. At the very moment that she is about to escort him to the elevator and out of the facility, she receives a text message from her husband that is urgent and distracts here. The text message did not actually come from her husband, but rather from one of Elliot's f/society comrades.In this tutorial, I will show you how Elliot's comrades at f/society were able to send the Steel Mountain manager an urgent, spoofed text message that appeared to come from her husband indicating that he was at the hospital and had a serious health issue.On the show, Elliot's f/society comrades useKalito send the spoofed SMS, but this feature has been discontinued in recent versions of Kali. Luckily, though, it is still inBackTrack, so for this tutorial, we will be reverting to our trusty BackTrack installation (one more example that the newest is not always the best).Step 1: Fire Up BackTrack & Start Social Engineering Toolkit (SET)Let's begin by firing up Backtrack 5 and then navigating to Applications -> Exploitation Tools -> Social Engineering Tools -> Social Engineering Toolkit (SET), then select "set" as I have done in the screenshot below.This will start the SET opening screen as seen below. SET is capable of numerous social engineering attacks. We have previouslyused SET to spear phish in BackTrack, but the one we want this time is "SMS Spoofing Attack Vector." To begin this attack, Select #7.In the following screen we are asked whether we want "Perform a SMS Spoofing Attack" or "Create a Social Engineering Template." Select #1. Once you have made that selection, you will be queried whether you want to spoof a single number or a mass attack. Select #1 for a single number.Step 2: Set Up a Spoofed Text MessageHere, I want to send a spoofed text message from Mary (my best friend's girlfriend) to John (my best friend) where she breaks up with him. This should rattle him a bit and give me a few chuckles as he is madly in love with her.First, enter his phone number where it asks you "Send sms to." Then select #2 to craft a One-Time Use SMS. Finally, enter her phone number. Make certain both numbers are preceded by the "+".Step 3: Craft the Text MessageIn our final step, we need to type the message we want sent to John from his girlfriend, Mary."I'm so sorry John. I have met another man and he is the love of my life. I hope we can remain friends"When you are finished typing, exit by hittingControl+C.Step 4: Send the Message!This will bring you to the final screen. In this screen, we will need to select the intermediary for the spoofed SMS message. You have four options here. The first is free, and as they say, it is buggy (when I ran it, SET crashed). Then, there are two for-pay options and, finally, the Android emulator.I chose the third option, SMSGANG. They charge 3 euros for 5 messages, or about $0.65 in U.S. dollars per message. When you pay (they accept credit cards and PayPal) they send you a PIN code. After selecting #3, it will ask you for a "pincode." Enter the one SMSGANG emailed you and then your text message is sent!Keep coming back, my rookie hackers, as we continue to show youall the hacks of Mr. Robot!Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseRelatedNews:Hacker Points Out iOS Security Flaw That Allows iPhone Text SpoofingHow To:Keep Long Texts from Breaking into Separate Messages on AndroidAnonymous Texting 101:How to Block Your Cell Phone Number While Sending Text MessagesNews:Comparing the Best International Data Plans from All Major US CarriersHow To:Send & Receive SMS Texts on Your Computer for FreeHow To:Bypass Two-Way Authentication on Facebook with Android ScriptHow To:No Data, No Problem—Use SMS to Connect to Your Favorite Web Services on AndroidNews:Google to Remove SMS Features from Hangouts (Update: New Version Rolling Out)News:Facebook Messenger Can Now Send & Receive All Your Texts—Here's How to Turn It OnHow To:Fix Delayed iMessages & Text Messages After Upgrading to iOS 7How To:Send & Receive Text Messages Right from Your Nexus 7 3G Tablet (Rooted & Non-Rooted)How To:Send & Receive Encrypted Android Texts Using Your Mac's Messages AppiPhone Text Bomb Your Friends:The Ultimate SMS PrankHow To:Let Friends & Family Know Where You Are Automatically with a Secret Text CodeHow To:Remotely View & Send Text Messages from Your Android Phone Using Any Web BrowserHow To:Make Texts & iMessages Stand Out on Your iPhone with Bold Subject LinesHow To:iOS 12 Makes 2FA for Third-Party Apps & Websites Easy with Security Code AutoFill from SMS TextsHow To:Filter Unknown Senders in iMessage to Block Unwanted Notifications & Keep Your Messages App CleanThe Hacks of Mr. Robot:How to Hack BluetoothHow To:TextStats Gives You Detailed Info of Your Text Messaging Habits on AndroidHow To:Encrypt Your Calls & Texts on AndroidHow To:Make an SMS Intruder AlarmHow To:10 Free Texting Apps for Android That Are Way Better Than Your Stock SMS AppHow To:Send Text SMS from Gmail AccountHow To:Send Text Messages from Google Home to Any ContactHow To:Block Any Unwanted Text Messages or iMessages on Your iPhone in iOS 7How To:Tired of Paying for Calls & Texts? These 6 Free Apps Can Cut Down Your Cell Phone BillHow To:Prank Your Apple Friends with 1,000s of iMessages in Just One ClickHow To:Send & Receive Texts from Your Android Using Apple Messages on Your MacHow To:Use Gmail's New Confidential Mode to Send Private, Self-Destructing Emails from Your PhoneHow To:Use Text Messages to Surf the Web on Your Phone Without Any DataHow To:Be More Secretive Using Hide SMS and Call RecorderHow To:Add a contact to an SMS text message on a BlackBerry phoneNews:Russian-Made Adware 'Ewind' Can Give Hackers Control Over Your Android DeviceNews:Someone Just Hacked a Way to Use iMessage on AndroidNews:A Game of Real HackingHow To:Send SMS Messages with PythonHow To:Filter Unwanted Calls & SMS for Free with Google VoiceHow To:Things to Do on WonderHowTo (02/08 - 02/14)How To:Send SMS text messages on a Palm Treo 800w cell phone