Iran Exploited Mobile Network Vulnerabilities to Track U.S. Military Personnel

According to a new report, the government of Iran used long-known vulnerabilities in mobile networks to track the location of U.S. service members in the Middle East.

Based on the available information, the data obtained in this way was used during the preparations for military action and in its initial stage — to carry out strikes against identified targets.

Vulnerabilities That Have Long Been Known

These are flaws in cellular communication protocols that security experts describe as having been known for many years. Despite this, they can still be used to determine subscribers' geolocation without their knowledge.

Such weak points in mobile carriers' infrastructure have traditionally been associated with the SS7 signaling protocol, which underpins international roaming and call routing. These vulnerabilities allow attackers, including state actors, to track the movements of specific phones in near real time.

Implications for Military Security

The use of such tools by a state actor against military personnel illustrates just how vulnerable civilian telecommunications infrastructure remains in the face of targeted espionage. The report indicates that location data obtained through cellular networks was used in the context of an armed conflict.

The case once again draws attention to a long-standing problem in the industry: despite repeated warnings from experts, the fundamental weaknesses of signaling protocols have never been addressed on a global level, leaving users — including service members — potentially vulnerable to tracking by foreign states.

Source: TechCrunch