Post Mon Aug 15, 2011 1:30 pm

USSD Testing

Unstructured Supplementary Service Data (USSD) is used by many banks as a method to provide mobile banking services in the region.
I was wondering if there is any way of intercepting the data and tampering with it over the wire.
Since USSD uses the normal GSM channels, I found this document the most useful so far: http://events.ccc.de/congress/2010/Fahr ... Munaut.pdf

Can anyone shed more light on how to test USSD services?
CISM, CEH, CISA, ISO 27001 LA