hacking a dumbphone

Considering that these things are extremely old, how feasible would it be to turn one into a spy device? There surely are exploits that allow for RCE through calls/sms, right? Would it be possible for i.e. an attacker to remotely softmod the OS to allow for stealthly recording audio and sending it away via a phone call? I'm thinking about things like the old Nokia 3310, which didn't even have a web browser or support for internet.

>>21562 Well, you can't really use any secure messaging like Signal or Session etc. SMS is sent through plain text and easily monitored. There's always that concern. https://www.theregister.com/2001/12/06/sms_phone_crash_exploit/ I found this, where there was a glitch that could essentially brick a phone by sending it a specific text message. As for any exploit that backdoors a 3310 for someone to track it on the device level, I'm not sure. I assume there are some methods that could make it happen similar to what the NSA ANT/TAO Catalog accomplished.

Theoretically, yes you could turn an old dumbphone into a spy device. Finding vulnerabilities in their software and a way to send them will be difficult, should but doable. I don't know why you would go that route because in practice though it would be rather difficult because fewer countries are supporting the 2G and 3G bands most dumbphones use and in turn fewer people are using dumbphones. Stringrays also exist for this purpose but getting your hands on one is nigh-impossible. There's probably better spy devices that are easier to use, modify and obtain. Also see the image attached to >>21564 for more devices that can do the same purpose that you're looking for.

I might as well link the catalog here too. https://archive.org/details/EFF_-_20131230-appelbaum-nsa_ant_catalog/