Greek Police arrested two Chinese nationals who with a particularly sophisticated electronic fraud method, known as “SMS Blaster Attacks”, defraud citizens with phishing.
Two Chinese men, aged 29 and 31, allegedly had set up a mobile system for mass sending of misleading SMS, exploiting security gaps in mobile telephony networks.
With a hi tech device hidden in the trunk of their car, the two men were hacking mobile phones of passersby, sent them links pretending to be a bank or other and obtaining access to citizens’ bank accounts.
What are “SMS Blaster Attacks”
SMS Blaster Attacks are a form of “man-in-the-middle” cyberattack, in which the perpetrators create a fake mobile phone antenna (fake base station), also known as an IMSI catcher.
In this way:
Citizens’ mobile phones are “tricked” and connected to the fake antenna
The perpetrators downgrade the connection from 4G to 2G, where there are serious security gaps
They gain access to basic device identification information, such as the subscriber number
They send mass misleading SMS without using a mobile telephony provider
The specially configured vehicle
According to the ELAS, the arrested were using a specially configured vehicle, in which they had installed:
A mobile computer system with internet access
A specialized transmitter – antenna, placed on the roof of the car, in the shape of a “shark fin”
Software for creating false mobile telephony base stations
The vehicle essentially functioned as a mobile cyberattack station, allowing the perpetrators to target citizens in different areas.
How they scammed victims
After gaining access to citizens’ mobile phones, the perpetrators:
Sent SMS with phishing links
Falsely posed as banks or courier companies
Invited victims to enter:
bank card details
personal data
access codes
Then, they used the stolen data for illegal product purchases and financial transactions.
The arrests and the investigation
The two defendants were located on April 9, 2025 in the Spata area in eastern Attica.
During the check, they showed fake ID cards, while the search of the vehicle and their possession confiscated:
the specially configured vehicle
the electronic equipment
five mobile phones
So far, three cases of fraud have been investigated in Maroussi, Spata and Athens, while the investigation is ongoing to determine the full scope of their activities.
The arrested were taken to the competent Prosecutor’s Office, facing charges of fraud, forgery and illegal access to information systems.
