How Police Can Track Your Phone

Big thanks to ThreatLocker for sponsoring my trip to Black Hat USA 2026 and also for sponsoring this video. To start your free trial with ThreatLocker please use the following link: https://www.threatlocker.com/davidbombal

Your phone can be tricked into connecting to a fake cell tower. These devices are commonly known as Stingrays, cell-site simulators or IMSI catchers. They can be used to
identify and locate phones in an area, and some attacks can interfere with the security of your cellular connection.

At Black Hat and DEF CON, I spoke to Cooper Quintin, Senior Staff Technologist at the Electronic Frontier Foundation (EFF), about Rayhunter.

Rayhunter is an open-source project from the EFF designed to detect suspicious cellular activity using inexpensive mobile hotspot hardware.

In this interview, Cooper explains how Stingrays and IMSI catchers work, why your phone can connect to a fake cell tower, what an IMSI is, how cellular downgrade attacks work, what a null cipher is, how Rayhunter detects suspicious activity, and what the EFF has learned from real-world deployments.

We also get into mobile forensic extraction, phone searches at the border, biometrics vs PINs and passwords, and the bigger question of how much surveillance power governments and law enforcement should have.

Thanks to ThreatLocker for sponsoring my trip to Black Hat and DEF CON and for sponsoring this video.
#CyberSecurity #Privacy #Hacking

// Cooper Quintin’s SOCIAL //
EFF Website: https://www.eff.org/about/staff/coope…
LinkedIn: / cooper-quintin-932029125
Website: https://cooperq.com/

// Web Page REFERENCE //
https://www.eff.org/deeplinks/2025/03…
https://www.eff.org/
https://ssd.eff.org/

// David’s Social //

================
Coect with me:
================
Discord: http://discord.davidbombal.com
X: https://www.x.com/davidbombal
Instagram: https://www.instagram.com/davidbombal
LinkedIn: https://www.linkedin.com/in/davidbombal
Facebook: https://www.facebook.com/davidbombal.co
TikTok: http://tiktok.com/@davidbombal
YouTube Main https://www.youtube.com/davidbombal
YouTube Tech: https://www.youtube.com/chael/UCZTIRrENWr_rjVoA7BcUE_A
YouTube Clips: https://www.youtube.com/chael/UCbY5wGxQgIiAeMdNkW5wM6Q
YouTube Emerging Technologies: https://www.youtube.com/chael/UCbY5wGxQgIiAeMdNkW5wM6Q
YouTube Shorts: https://www.youtube.com/chael/UCEyCubIF0e8MYi1jkgVepKg
Apple Podcast: https://davidbombal.wiki/applepodcast
Spotify Podcast: https://open.spotify.com/show/3f6k6gERfuriI96efWWLQQ
SoundCloud: / davidbombal

================
Support me:
================
Or, buy my CCNA course and support me:
DavidBombal.com: CCNA ($10): http://bit.ly/yt999ccna
Udemy CCNA Course: https://bit.ly/ccnafor10dollars
GNS3 CCNA Course: CCNA ($10): https://bit.ly/gns3ccna10

// MY STUFF //
https://www.amazon.com/shop/davidbombal

// SPONSORS //
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com

// MENU //
0:00 – Intro
0:52 – Cooper Quintin introduction

01:18 – Rayhunter tool by EFF
02:45 – Stingrays used by law enforcement

05:05 – How the Rayhunter works
08:44 – Threatlocker sponsor segment
09:59 – Rayhunter results
12:06 – Concerns of Stingrays
14:02 – Why should people care
15:17 – Concerns of mobile forensic extraction tools

17:17 – Password vs biometric
18:04 – Conclusion

Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel!

Disclaimer: This video is for educational purposes only.
#cybersecurity #bhusa26 #privacy

subscribe
  • David Bombal