Grand Hyatt, Kochi, Kerala
Trainings07-09 Oct, 2025
Conference10-11 Oct, 2025
Telecom Village is a hub for telecom security enthusiasts, uniting professionals, hackers, and researchers. Whether you're an expert or a newcomer, it's the perfect space to learn, hack, and collaborate.
Join us for insightful talks, hands-on workshop, CTFs, and engaging conversations on telecom security.
Expand your knowledge, test your skills, and connect with like-minded professionals. Welcome to Telecom Village!
At Telecom Village, we foster a community-driven approach to telecom security, with a strong focus on 5G networks. Our goal is to inspire creative thinking, guiding participants through the process of target selection, in-depth research, and strategic information gathering.
We offer insightful talks, hands-on workshops, CTFs, challenges and engaging conversations on the latest threats and defenses in telecom security. Through collaboration and knowledge sharing, we empower participants with critical skills like patience, stealth, and adaptability to navigate this evolving landscape.
Anatomy of Telecom Malware” is a Telecom Village talk spanning 2G, 3G, 4G/LTE and cloud-native 5G. It dissects how attackers weaponise every layer of the stack—SS7/SIGTRAN, Diameter, GTP, SMPP and SBA APIs—while adding three critical lenses:
Supply-chain infiltration: poisoned firmware builds and compromised eSIM-provisioning servers that let implants enter the core before day 0.
Transit-based backdoors: malware such as the LightBasin “GTPDoor” family that hides its C2 inside roaming GTP-C/U tunnels, crossing operator boundaries unnoticed.
Field-proven attacks: campaigns like SIMjacker’s SS7/S@T-browser exploitation for OTP interception and recent SS7-redirect bank-fraud cases, plus roaming-hub spyware and diameter peer-scraping seen in the wild.
Attendees leave with a telecom-specific kill-chain map, protocol-aware detection tricks, and a 10-point hardening checklist to protect both legacy and future networks."
This workshop demonstrates how SS7 signaling can be intercepted and manipulated to retrieve a mobile user's location without user interaction using custom-developed malware. Additionally, it demonstrates how the GTPdoor malware creates a hidden backdoor by abusing GTP signaling in roaming networks.
The session is a case study about how the WAPDropper Android malware abuses premium telecom calling services. It explains how a user unknowingly installs the malware and then gets billed without their consent. The session also demonstrates how a legitimate-looking application can be used to exploit WAP billing mechanisms.
Deep dive into Android’s eSIM management APIs and how they can be abused.
Building and analyzing a proof-of-concept malware for silent eSIM installation and location harvesting.
Understanding telecom backend provisioning vulnerabilities enabling malicious profile injection.
Detection techniques, anomaly signals, and defensive engineering against malicious SIM profile abuse.
Live demonstration on extracting call metadata and geolocation from compromised profiles without raising alarms."
workshop on GPON network security weakness and different attack use cases on GPON network
Decode the Signal: Breaking Down the PDU Format Learn how to dissect the raw PDUs used in SMS-based communication. Weaponize the Message: Crafting Custom PDU Payloads Dive into the dark arts of crafting malicious SMS payloads. Hunt the Signal: Detecting SIMjacker Through Forensic PDU Analysis Learn to identify signs of SIMjacker attacks in PDU traffic.
Reasons to secure the LTE/4G Network
Ways to secure the LTE -
Deep protocol clarity – Audience will understand TCP packets at a granular level, including why the SYN stage is often treated as “safe” and how that assumption can be dangerous. Problem awareness – Learn how incomplete handshakes can still carry hidden data, with a real-world telecom billing server scenario illustrating the risk. Hands-on perspective – See a controlled lab demonstration proving that data can be exfiltrated even without completing the 3-way handshake. Telecom relevance – Gain insight into telecom-specific use cases where such covert channels could appear.
At Malvynox, we run a series of advanced Capture the Flag (CTF) competitions designed to push the boundaries of telecom network security research and skills development, we are coming up with the details very soon
© Copyright 2025 -c0c0n. All Right Reserved
support@c0c0n.org 
(+91)-974-690-6654
11:00 - 11:10
07-11 October, 2025
Grand Hyatt, Bolgatty, Kochi, Kerala