4G Attack Vectors and Vulnerabilities

Explain how weaknesses in GSM/2G (e.g., A5/1, one-way authentication) are exploited in downgrade attacks.

Describe how subscriber identifiers (IMSI, IMEI) can be captured in LTE by exploiting pre-authentication signaling.

Explain the concept of radio capability-based tracking attacks.

Describe user-plane manipulation attacks, such as the aLTEr attack for DNS spoofing.

Explain denial-of-service attacks against LTE, such as spoofing NAS reject messages.