Security researchers have uncovered a surveillance company in the Middle East exploiting a novel attack to deceive phone operators into revealing a subscriber's location. This attack circumvents security measures designed to prevent unauthorized access to SS7, a protocol used by global phone carriers for call and text message routing. The exploitation, observed since late 2024, allows the surveillance vendor to pinpoint individuals' locations via cell tower connections.
Enea, a cybersecurity firm, reported the bypass attack targeted specific subscribers, but its effectiveness varied across carriers. The attack can narrow a person's location to within a few hundred meters in urban areas. While the affected phone operator was notified, the surveillance vendor remains unnamed.
The use of such exploits is reportedly on the rise, with surveillance vendors, often working for government clients, employing them for intelligence gathering. Despite phone companies implementing firewalls, vulnerabilities persist within the global cell network, leaving subscribers with limited defense options.