GSM 2G/3G/4G interception system - MaxxGSM

The GSM 2G/3G/4G interception system MaxxGSM system allows for real-time interception of telephone conversations and text messages sent through a GSM network. It is compatible with GSM 850/900/1800/1900 network and base transceiver stations all over the world.

The GSM interception system supports A5.1 and A5.2 encryption algorithms used to encode phone calls over GSM networks. The system's range of operation has a radius of about 1 km, which can be extended up to 5.5 km with additional 50W power amplifiers. The GSM 2G/3G/4G interception system MaxxGSM is able to intercept 2/4/8 target phones simultaneously (with the ability to expand the system to support greater number of targets), depending on RF channels and the number of communication modules (in passive mode).

Intercepted calls and text messages can be recorded and subject to further analysis. The device is operated through a PC software suite, included in the package.

Depending on the configuration, the system can operate in either of four available modes:

• 

  Interception mode

  Monitors incoming and outgoing calls and text messages within the system's operational range, passive interception module required.

• 

  Passive mode of the MaxxGSM

  Identifies and analyses connections between a phone and a base transceiver station, using collected data to obtain Kc session key used by A5.1 and A5.2 algorithms. The key is changed no less often than once an hour, or after making several calls. The only possible mode if the target phone uses the A5.1 algorithm only. Uses passive interception and decryption module.

• 

  Semi-active mode

  The target is first identified, obtaining its TIMSI identifier (Temporary Mobile Subscriber Identity), the system's BTS module simulates the mobile service provider's BTS, thus intercepting the encryption key used by the target phone. The BTS module is then switched off, leaving the system operating in passive mode. The target phone has to use A5.2 encryption. Semi-active mode is more efficient than passive mode. Requires passive interception, BTS simulation and decryption modules.

• 

  Active mode

  After identification and interception of the key, the system switches the communication module on, which simulates the surveiled phone to the operator's BTS station. This mode allows for operation when the network changes the Kc key with every connection. Requires passive interception, decryption, BTS simulation and communication modules.

Each mode requires control and monitoring module. The modules do not need to remain an the same location and can be used and controlled remotely.

The operation of the GSM 2G/3G/4G interception system - MaxxGSM is undetectable to BTS stations and target phones. In passive mode, it does not generate any signals, while in semi-active and active modes, it uses the same algorithms utilised the base transceiver station, thus remaining undetectable.

Key features of the GSM 2G/3G/4G interception system MaxxGSM

• intercepts and records all phone conversations and text messages from the target phone
• invisible to the service provider and the target phone in all modes of operation (including semi-active and active modes)
• in active mode, the interlocutor's id is transmitted to the target phone
• all communications are decrypted with algorithms used by the service provider
• compatible with all GSM networks, easy to reconfigure for operation in another provider's network
• target phone identified by IMEI, IMSI or TIMSI
• semi-active and active modes allow to jam the communication
• active mode allows to detect replacement of phone and SIM card (saves IMEI and IMSI numbers)
• standard interception range about 1km, with the possibility to expand up to 5.5km with an amplifier (range depends on terrain, building density and signal strength)
• 15 seconds start-up time
• particular modules of the system can be placed in different locations, cooperating remotely

Optional functionalities

• triangulation of geographical location
• interception in 3G networks using a supercomputer with 564 teraFLOPS to 3384 petaFLOPS processing power
• local network mode: the system provides local area GSM communication, transferring the data through another network (landline, wireless, over the Internet)
• private network mode: provides local area GSM communication between specified users, ignoring the service providers' base transceiver stations.

Product video