The study found that GTP (GPRS Tunnelling Protocol) attacks should prompt mobile operators to urgently re-evaluate and reinforce their security protocols, especially in the midst of the march towards 5G networks.    

The GTP mobile network protocol contains vulnerabilities that malicious actors can exploit, leading to user data being intercepted, networks disrupted, or fraudulent activities executed. This protocol is frequently used within 5G and LTE networks,

When analysing 150 security assessments across 39 live mobile networks across 24 countries in 2022-23, SecurityGen found that 77% of the networks lacked any form of cybersecurity defences against GTP attacks. 

“Our investigation into GTP’s security flaws underscores the urgent need for comprehensive strategies, particularly in the evolving landscape of 5G,” said Dmitry Kurbatov, SecurityGen’s co-founder and CTO.

During the analysis the researchers also found that in 71% of networks, GTP attacks successfully revealed user information, and a further 85% were susceptible to targeted attacks that could disrupt data transmission services.

Denial-of-service attacks were also a common target, where 46% of networks were found to be vulnerable. Additionally, user traffic interception was a vulnerability for 69% of networks. 

Recommended reading

• Protocol Scheme Stopped £32m in Banking Fraud This Year
• Data Privacy Day: Don’t Put all your Eggs in One Basket
• Major UK Banks Fail to Implement Latest Online Banking Security Measures

“The interconnected nature of mobile networks across generations exacerbates the risks associated with GTP security vulnerabilities. Our findings reveal a disconcerting lack of robust security measures across a significant portion of the networks we examined. It is clear that comprehensive cyber-security measures are largely absent despite initiatives by GSMA and individual operators,” said Kurbatov.

These findings come on the backdrop of the UK being in the midst of a 5G rollout, with all major UK broadband networks launching 5G services, and 77% of the UK population now having access to basic 5G services.

“The revelations from this study should serve as a wake-up call, compelling operators and the broader telecoms industry to take the requisite steps to secure our interlinked digital future,” he added.