Monitoring wireless data consumption

A computer-implemented method comprising:

• gaining root access to a communication device associated with a service provider;
• updating a routing table of the communication device to identify at least a first destination and a first communication bearer, wherein the first destination is a destination unauthorized by the service provider;
• encapsulating data as an encapsulated data packet;
• transmitting the encapsulated data packet to a proxy server via the first communication bearer based at least in part on the routing table;
• and
• receiving an encapsulated reply data packet from the proxy server at the communication device, the encapsulated reply data packet including at least web content fetched by the proxy server,
• wherein the first communication bearer is a dedicated bearer providing Voice over Long Term Evolution (VoLTE) voice communications.

A communication device operating on a network associated with a service provider, the communication device comprising:

• a processor, and
• a memory including one or more modules that are executable by the processor to perform operations comprising:
• updating a routing table stored in the memory to identify at least a first destination and a first communication bearer, wherein the first destination is a proxy server unauthorized by the service provider;
• encapsulating data as an encapsulated data packet;
• transmitting the encapsulated data packet to the proxy server via the first communication bearer based at least in part on the routing table;
• receiving an encapsulated reply data packet, the encapsulated reply data packet including at least web content fetched by the proxy server;
• providing an indication to the service provider of a network vulnerability;
• and
• in response, storing the routing table in a trusted execution environment of the communication device.