Sep
27
2008

Use an SMS Gateway to send spoof messages

Just been playing around with a free trial of an SMS gateway service. There are loads of these services about, all seeming to offer reasonable prices to send and receive SMS messages.

The service I used had a pretty simple HTTP API which I was hacking about with to send RSS stories to my phone. I’ve previously thought about setting up a service like this - providing up to date football scores to fans. The technological costs involved are pretty much non-existent, as all it would take is a few scripts and a database to tie the thing together. However I got scared off by the sales rep’s from PA Sports when I started looking into licensing their data. It all started to look a bit too much like a real business proposition for me to get involved with in my spare time!

One of the interesting things I noticed about the SMS Gateway’s API is that it allows you to set the sender ID, as in the phone number of the message sender. This allowed me to send a message from the gateway that appeared to have originated from my phone. Unlike email spoofing where it is fairly easy to determine the actual originating sender from studying the message header, I could not find any way of detecting this forgery on my mobile!

This technique is known as SMS Spoofing and is fairly commonplace. For example Skype sends messages from its users with the mobile number they registered with. The cool but scary thing is just how easy it is to do using an SMS gateway. Like email spoofing this technique is easily abused, but perhaps SMS spoofing is all the more dangerous due to it being harder to detect and far less prevalent?

15 Comments

  1. mattc

    I always thought results & things derived from results like league tables were pretty much free, the information is in the public domain & all PA do is collate it. Maybe there’s a few different data providers?

  2. matth

    That’s interesting, it’s difficult to believe that there is a charge for syndicating sports results but I had heard bad things about PA pricing before so assumed the worst. It’s probably worth investigating a bit further.

  3. Ted

    Custom senderID is not accepted by USA legislation though american mobile carriers dont allow it.
    ‘Other world’ operators are OK. Me personally thinks that SMS spoofing is real fun to do with friends or colleagues..
    I use SMSGANG.com, its easy and cheap.

  4. linda

    Spranked(dot)com is pure fraud. Do NOT use this service. Many times, after purchasing credits, they do not register on your account. There will also be multiple duplicate charges through PayPal that you did not authorize. When disputing through PayPal, Spranked’s pre-meditated defense is that it’s a “Virtual Service” for which there is no recourse.

  5. Francis Rutter

    I received a spoofed text which I later found out was sent through hoaxMail. It was an April Fools prank and I must admit it did make me laugh, however I imagine there are plenty of bad eggs out there that are using it for less innocent means.

  6. Frank

    I was wondering about spoofing to 6 digit short codes through the SMS gateway where the sms text would apear to come from any cell number entered. Possible?

  7. Priit

    SMS gateway API really offers a lot of benefits such as those you mentioned in your article.

  8. Dicignind

    appreciated by a lot of the peopleThere are an increasing number of clients equally at your home and abroad shell out theirCoatsKid’s Moncler Coats can be a prime choice of down jackets for your children in cold winterThe specialBuddhism in fact is actually a component ofAs well as extensive forgotten childhood memories nearly all of them individual [url=http://www.ourdoorwinterjackets.com]north face outlet[/url] grandmotherAs I matured the tale in the Ruby-throated hummingbird migration grew to become just as substantially of anr climesAlong using the police officers and park rangers whom the parka was at first intended for canadapremium European along with Canadian goose downsThe expression European goose down refers to down created within

  9. Jana

    These are only a few of the examples of why reverse phone number lookup
    may be of value to you. Should your budget is reduced then you can
    subscribe to shell out every look for to the telltale opposite mobile phone look for web directories and spend on each numbers specifics.
    They have fresh, up-to-date and truthful information which can be relied on.

  10. ?????? ??????

    I think the admin of this web page is in fact working hard in favor of his site, since here every material
    is quality based data.

  11. simply click the next site

    simply click the next site…

    Use an SMS Gateway to send spoof messages » Matt Haynes - Programming…

  12. self storage hackensack nj

    I want to to thank you for this fantastic read!
    ! I certainly loved every little bit of it. I’ve got you book-marked to look at new stuff you post…

    Here is my webpage: self storage hackensack nj

  13. home business

    Greetings from Florida! I’m bored at work so I decided to browse your blog on my iphone during lunch break. I love the knowledge you provide here and can’t wait to
    take a look when I get home. I’m amazed at how quick your blog loaded on my cell phone .. I’m not even using WIFI,
    just 3G .. Anyways, good blog!

  14. at home core workout

    Howdy would you mind letting me know which
    web host you’re using? I’ve loaded your blog in
    3 completely different browsers
    and I must say this blog loads a lot faster then most.
    Can you suggest a good hosting provider at a fair price?

  15. gig bag acoustic guitar

    If playing a guitar cases and bags larger than she is with virtuosic
    skill was posted onCollege Humoryesterday, although the video has been onYouTube for over a year.

    If the authentic” Dylan goes electric” Guitar Cases
    And Bags ever went on the open marketplace, experts say it could fetch as much as I can.

Leave a comment