Inside an Amateur Bugging Device

[Mitch] got interested in the S8 “data line locator” so he did the work to tear into its hardware and software. If you haven’t seen these, they appear to be a USB cable. However, inside the USB plug is a small GSM radio that allows you to query the device for its location, listen on a tiny microphone, or even have it call you back when it hears something. The idea is that you plug the cable into your car charger and a thief would never know it was a tracking device. Of course, you can probably think of less savory uses despite the warning on Banggood:

Please strictly abide by the relevant laws of the state, shall not be used for any illegal use of this product, the consequences of the use of self conceit.

We aren’t sure what the last part means, but we are pretty sure people can and will use these for no good, so it is interesting to see what they contain.

The device is really simple inside, containing just two ICs. One is a CPU and the other a GSM phone. [Mitch] found a simple OS that targeted the CPU and was able to use that to dump the Flash contents. He could not figure out how to write to it however. Glancing through the dumps though, it seems it uses Nucleus as an operating system. He examined it using a variety of interesting techniques and tools, so even if you don’t care about this device in particular you still might enjoy the process.

[Mitch] notes some similar hardware in leaked NSA documents. People are worried about the Amazon Echo listening. Maybe it would be a good idea to scan your USB cables. Bugging tech has certainly come a long way.

32 thoughts on “Inside an Amateur Bugging Device

  1. Nice to see a rational date format printed on the circuit board, even though it looks grotty enough to be from the 70s. Even I was making better looking boards than that in 1982 though, granted, BGAs and 0402 packages didn’t exist then…

    1. I think it looks pretty good…think of the budget they’re probably working with. The big ICs are ringed with their decouplers and crystals, it looks like the power traces run around the outside with those big diodes, there are pogo pads for major points…

      It’s not, like, STYLISH. But it doesn’t look bad to me

      1. That’s the thing…
        We can all have pretty colours and nice curves on everything… but it is a toy if it doesn’t at least look sturdy nor look professional. Having aluminium galvanized to any colour is fine… nice flat surfaces with a gentle curvature for comfort when handling… fine… but:

        Imagine going to your local bank and their printer was a fisherprice “curves and pretty colours” super compact mess, and, their PCs all being V-Tech or something?
        That would look so out of place. Nothing against such vanity-accessory things, but at least build them things stronger! Nothing so great than advising a friend they need a new laptop, even after repair attempts, and they just say it probably wasn’t fixed properly… despite being explained.

        I’d take the industrial/business grade over the pretty/glitter/shiny/”wow”/cool-factor version anytime!

        1. “Imagine going to your local bank”

          I’m trying, but I can’t seem to find the need to. I could care less what sort of alienware computers they use, because I’m not there to look at it – I pay my bills online.

          1. OK, imagine that on-line bank gets hacked and you’ve been targeted by someone that developed a personal grudge against you… for whatever petty reason they have…. and you get dragged into court:
            A nice clean court with that polished oak furnishings et al…
            Yet the judge pull out a bright pink laptop with broken hinges held together with gaffer tape and has a cord with frayed wires wrapped in clear tape.

            I’ve got news for you, That judge is desperate to get a bribe off the bank and I’d think HIM and HIS PINK fisherprice toy laptop is gonna be bias and you’ll loose the case.
            That is why the more professional looking stuff exists, otherwise ask the judge if they have the paperwork to declare their position of power (Law category dependent… i.e. works in correct courts and gets a contempt sentence if used in the wrong courts)… It may be good to use a delay tactic, “Not enough time to find the evidence in my defense”. Usually if done early in the case, then another judge (looking more professional) gets assigned to the case (Due to no relevant info being heard by the original judge).

          2. In other words, If I got a HP Stream 11-y000na… then I know as soon a a web site (Think youtube, soundcloud etc) decides to throttle certain content or goes glitchy/buggy/etc… then within seconds that laptop gets an instant one-foot disassembly and reduced to sub-atomic shards, Because it doesn’t feel/look/behave like a serious laptop.
            I know, because I got such a toy from social workers because they didn’t want to spend a tenner extra (Nor allow me to contribute an extra tenner), and the first aggravating issue that happened saw the thing become the negative mould of my knee and the leg part above and below said knee.

            On the other hand, the Dell latitude series and the (Older) HP Elitebook series, the Lenovo T-series and the X-series are real laptops. Then there are the high-end machines.
            The worst I’ve done to my E6400 is slam the lid shut, left it aside and forgot about it for the day… I’ve accidentally dropped it , knocked it on the sides of things, carried it in a backpack when biking all over the city… etc and yet it holds up very strong.

    1. Found a good use: monitoring your bickering children.
      Let them know “the walls have ears, ya know!… You two better get along now, or I’ll find out right away”.
      They’ll learn very fast the rooms are bugged… about as much of a bug as a baby monitor to help you keep an eye/ear out for your newly born family member.

          1. Mom is always Mom. And yes, I would listen to and respect her, My Dad died 2 years later. Same respect for him. Parents are amazing. They give their lives for these little ones. Proud to be dad for my 25 and 27 year olds. They respect me and my respect for them increases every day.

  2. this $9 “GSM Moniter Line GPS Locator USB Cable Pick-up Data Line for Android Phone” has same guts as $6 “Global Locator Mini Time Car A8 GSM/GPRS/GPS Tracking Tracker USB Cable Funny” (“funny” is a nice touch in item name).
    There is no GPS inside, location is thru celltower identifier and LAC (Location Area Code)
    free website you can look up this info http://www.cell2gps.com

    this analysis is somewhat poorly researched, author didnt even get command syntax right (need commas between parameters when setting server address/apn)
    you can even buy bare pcb version of this device under “ChonChow 38*21mm Mini GPS GSM Tracker PCB Board with Antenna Microphone Micro USB Charge port SMS GPRS Free APP and Platform” on aliexpress.

    at $6 this is a great tinkering platform, would be nice to have free software firmware built.

    1. Hi rasz_pl,

      could you please elaborate on the correct syntax?
      Let’s say I want to set the server to example.com and port 90 what SMS would I need to send?

      I tried all combinations:
      esioaddr example.com,90
      esioaddr,example.com,90
      server example.com,90
      server,example.com,90

      Nothing causes a connection to example.com on port 90, though.

      Thanks!

      Regards
      Michael

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s