I was under the impression security researchers had managed to reverse engineer the operation of a cell tower for a fraction of the price. They then open sourced the software, and enthusiasts with the right equipment have been able to effectively create their own cellular network. 
Based on that knowledge they are basically creating a relay (man-in-the-middle) between their target and the real cell tower. Last I heard, the equipment will set you back about $10,000.