Check out this GSM Based IMSI Catcher I built using the Ettus Research USRP.
(Cell Intercept ...AKA IMSI catcher basic demo )
Open source IMSI catcher, with victim device a text messaging from phone number 1234 that says hacked. I have only my own phone attached. I did not open this BTS up for open registration because that is unethical.
Sorry for the video quality. I don't always edit my vids.
No... Im not doing this on a US network... before you ask. Testing in a controlled environment