Emergency presidential alert texts could be faked, researchers say
Fake presidential alerts could be sent to tens of thousands of phones, according to a report out of the University of Colorado Boulder.
Corinne ReichertSenior Editor
Corinne Reichert (she/her) grew up in Sydney, Australia and moved to California in 2019. She holds degrees in law and communications, and currently writes news, analysis and features for CNET across the topics of electric vehicles, broadband networks, mobile devices, big tech, artificial intelligence, home technology and entertainment. In her spare time, she watches soccer games and F1 races, and goes to Disneyland as often as possible.
I've been covering technology and mobile for 12 years, first as a telecommunications reporter and assistant editor at ZDNet in Australia, then as CNET's West Coast head of breaking news, and now in the Thought Leadership team.
Wireless Emergency Alerts (WEA) are geographically targeted messages that alert mobile users in the US about missing children (via Amber Alerts), severe weather and presidential announcements of national emergencies.
Now CU Boulder is saying presidential alert messages could be spoofed. Researchers say they found a backdoor that let them mimic alerts and blast fake messages to people confined to a small area, such as a city block or a sports stadium.
"Sending the emergency alert from the government to the cell towers is reasonably secure," said Sangtae Ha, assistant professor in the Department of Computer Science and co-author of the research report. "But there are huge vulnerabilities between the cell tower and the users."
Watch this: 5G and your health
The researchers developed software mimicking the presidential alert format and then used commercially available wireless transmitters to send the messages to phones within their radius. The team had a success rate of hitting 90% of all phones in the area it tested.
"We only need to broadcast that message into the right channel, and the smartphone will pick it up and display it," Ha said, adding that it could be sent to tens of thousands of phones.