Home / Technology / Global Spy Networks Exploit Phone Weaknesses
Global Spy Networks Exploit Phone Weaknesses
23 Apr
Summary
- Spy campaigns track locations by exploiting SS7 and Diameter telecom flaws.
- Vendors used "ghost" companies to access global phone networks.
- 019Mobile, Tango Networks, and Airtel Jersey provided infrastructure.
Security researchers have revealed two distinct spying campaigns that leverage vulnerabilities in global telecommunications infrastructure to track individuals' locations. These operations utilized "ghost" companies posing as legitimate cellular providers to gain access to global phone networks, effectively hiding their activities. The campaigns exploited known flaws in both the older SS7 protocol and the newer Diameter protocol, with some cell providers not fully implementing security features.
These surveillance efforts relied on access to specific telecom providers, including 019Mobile (Israel), Tango Networks U.K., and Airtel Jersey. These companies acted as entry and transit points for the surveillance vendors and their government clients. One campaign targeted individuals by abusing SS7 flaws, switching to Diameter if necessary. The second campaign employed a SIMjacker-style attack, sending special SMS messages to a target's SIM card to turn their phone into a location tracking device.
Researchers emphasize that these identified campaigns represent only a fraction of what is believed to be widespread exploitation of telecom vulnerabilities by surveillance vendors. The methods used indicate sophisticated, well-funded operations deeply integrated into the mobile signaling ecosystem, with evidence pointing towards Israeli-based commercial geo-intelligence providers.
