NTU uses AI agents to uncover flaws in mobile networks

The most critical vulnerability allows an attacker to reroute a subscriber’s internet traffic to a server of the attacker’s choosing. The team worked with an industry partner to recreate this session hijacking vulnerability in two commercial 5G core networks in controlled test environments. “In a worst-case scenario, an attacker could trick the mobile network into sending a user’s internet traffic straight to the attacker’s server, allowing them to secretly monitor the victim’s data,” said Lin Ziyu, a PhD student at NTU and the study’s first author.