(TS//SI//REL) MONKEYCALENDAR is a software implant for GSM (Global System for Mobile communication) subscriber identity module (SIM) cards. This implant pulls geolocation information from a target handset and exfiltrates it to a user-defined phone number via short message service (SMS).
(TS//SI//REL) Modern SIM cards (Phase 2+) have an application program interface known as the SIM Toolkit (STK). The STK has a suite of proactive commands that allow the SIM card to issue commands and make requests to the handset. MONKEYCALENDAR uses STK commands to retrieve location information and to exfiltrate data via SMS. After the MONKEYCALENDAR file is compiled, the program is loaded onto the SIM card using either a Universal Serial Bus (USB) smartcard reader or via over-the-air provisioning. In both cases, keys to the card may be required to install the application depending on the service provider’s security configuration.

Unit Cost: $0
Status: Released, not deployed.

Thank you for taking the time to read this article! As always keep the faith!
The NSA’s original documentation on MONKEYCALENDAR

The following two tabs change content below.

• Bio
• Latest Posts

Preston Hood

Owner at PJHoodsCo

Hello, my name is Preston. I am the owner of a small business tech company. I also have an interest in researching/writing about information security and related topics.

Latest posts by Preston Hood (see all)

• Information Security in Our World Today - 03/26/2015
• 49 Ways the NSA Can Spy On You - 01/30/2015
• NSA Device – STUCCOMONTANA - 01/27/2015
• NSA Device – PICASSO - 01/26/2015
• NSA Device – IRONCHEF - 01/23/2015