During exploitation of the SS7 protocol vulnerability, a remote interception of a message by a specified phone number takes place. This is necessary to log into the specified account on a specially configured WhatsApp emulator, which allows to form an archive within minutes containing: incoming and outgoing text messages, information about the current location, call history with the interlocutor and duration, contact lists, as well as received and sent photos and video files.