A cellular downgrade attack is a technique that coerces a phone to use a less secure mobile network mode, such as falling back from 4G or 5G to 2G. Attackers may do this by spoofing network signals, exploiting weak coverage, or setting up rogue base stations that advertise only older protocols. Once the device accepts the downgrade, it may lose stronger authentication, encryption, and integrity protections.
This matters because the weaker mode can expose users to interception, SMS abuse, location tracking, and denial of service. In real-world defense, carriers and OS vendors reduce the risk by disabling legacy fallback, warning users when insecure networks are available, and enforcing network policy controls. The goal is simple: remove the attacker’s easiest path to a weaker radio layer before it can be used for fraud or surveillance.