The Electronic Frontier Foundation has released an open source project called Rayhunter. It is designed to run on an inexpensive (~$20) mobile hotspot and look for signs of mobile spying devices called cell-site simulators. Also known as Stingrays or IMSI catchers, they masquerade as legitimate cellphone towers, tricking phones w/in a certain radius into connecting to the device rather than a tower.

https://www.eff.org/deeplinks/2025/03/meet-rayhunter-new-open-source-tool-eff-detect-cellular-spying

Meet Rayhunter: A New Open Source Tool from EFF to Detect Cellular Spying

Rayhunter is a new open source tool we’ve created that runs off an affordable mobile hotspot that we hope empowers everyone, regardless of technical skill, to help search out cell-site simulators (CSS) around the world.

Electronic Frontier Foundation

@briankrebs Serious questions for semi-technical person:

  • Is it necessary to get an "unlocked" model of the Orbic device?

  • Are they all Verizon?

  • Is this for the Verizon locked model only? Which MPNs? · Issue #112 · EFForg/rayhunter

    The readme states Orbic RC400L but on Ebay most of these are Verizon locked. The few unlocked one's have an MPN of ORB400LBVZRT, a list of Orbic MPNs this is tested to work on would be nice.

    GitHub