A surveillance vendor was caught exploiting a new SS7 attack to track people’s phone locations

Security researchers say a control company in the Middle East, telephone operators used a new attack that can disclose the location of a cell subscriber.

The attack is based on security conditions in terms of safety, which places special protocols called global telephone calls and text messages, which placed in order to access the SS7 or signal system.

SS7 allows the carriers to demand information about which cell tower connected to the phone, for example, for example, when you call someone from the outside or when text sends text.

Researchers in Enea are a cyberecurity company that provides protection for telephone carriers this week They observed that they observed anonymous control, which exploited the new Bypass attack until the end of 2024 to get the places of the people without their knowledge.

The author, the author, said that Techcrunch told Techcrunch that the company’s control dealer did not work against “several subscribers” and the attacks did not work against all telephone vehicles.

MC Did said that the closest cell tower will be narrowed in a few hundred meters in the city or intensive settlement of the city or intense settlements, which allows a person to find an individual.

Enea warned the phone operator observing that he was used, but refused to call the control dealer, except to note that it is located in the Middle East.

Mc DAID, TechCrunch, who attacked Techcrunch, is part of such exploits to get a person’s location, not using such exploits, the sellers they use ‘in case they are not successful in one place and do not use them. “

“We look forward to finding more and will be used,” said Mc Daid.

Incoming control vendors Spyware manufacturers Bulk Internet traffic providers are usually private companies working to conduct intelligence-collection operations against individuals for government customers. Governments often claim Use Spyware and others Operational technologies Vehicles were also used against serious criminals, but to target members of civil society Journalists and Activists.

In the past, the control vendors got access to SS7 with a local telephone operator, abused local telephone operator “Global Title” rental or through a state connection.

However, due to the nature of these attacks, there are few things that are at the level of cell network, telephone subscribers to defend against commissioning. On the contrary, defense against these attacks is mainly on telecom companies.

In recent years, telephone companies have installed firewall and other Kibbie security conditions to defend against SS7, but are protected as in the world of patchwork network, including all carriers, including the United States.

According to letter Last year, Sen Ron Wyden’s office was sent to the office of the US Department of Homeland, especially China, Iran, Israel, especially China, SS7, he said to “use US subscribers” in SS7. Saudi Arabia has also visited found abuse defects In the SS7 to control their citizens in the United States.