A new report from the Financial Times reveals that the Iranian government exploited well-known vulnerabilities in the global telecom infrastructure to locate U.S. military personnel during the build-up and early days of the conflict in the Middle East. According to the report, Iran used Signaling System 7, or SS7, a set of protocols for 2G and 3G networks that has long been the backbone of how cellular networks connect to route calls and texts worldwide. Research by the Mobile Surveillance Monitor and anonymous government officials uncovered that this surveillance technique, long abused by intelligence agencies, was employed to track cell phones abroad.
Iran was able to pinpoint U.S. military forces stationed in bases and hotels in Iraq, Bahrain, and other Middle Eastern countries, enabling strikes that caused several injuries. In addition to SS7, Iran also abused advertising technology used to serve targeted ads to cell phone users, another well-known surveillance method relying on everyday technology.
Sponsored Protocol
The SS7 Protocol and Its Longstanding Vulnerabilities
SS7 is a signaling protocol that enables cellular networks to communicate for functions like call handling, text messaging, and roaming. However, it was designed at a time when security was not a priority, and its weaknesses have been known for years. Intelligence agencies worldwide have exploited these flaws to locate cell phones in real time, often without carrier knowledge. In Iran's case, the abuse was systematic and aimed at U.S. military targets, demonstrating how legacy network vulnerabilities can be weaponized in modern conflicts.
Sponsored Protocol
How Iran Exploited the Flaws to Locate US Bases
According to the report, Iran used SS7 to send location requests to mobile networks serving areas where U.S. military personnel were stationed. Once approximate locations were obtained, the regime coordinated missile or drone strikes against bases and temporary housing. Attacks occurred in Iraq and Bahrain, resulting in injuries among American personnel. The use of advertising technology further refined location tracking by leveraging data from mobile ads. This dual approach made surveillance highly effective and difficult for US forces to counter.
Consequences of the Attacks and International Reactions
The revelations have raised serious concerns about mobile network security and nations' ability to protect their troops. As the international community discusses measures to strengthen telecom protocols, experts emphasize that transitioning to 5G may mitigate some vulnerabilities but not eliminate them entirely. Meanwhile, attention also turns to other technological innovations. For instance, PsiQuantum is building a light-based quantum computer, which could revolutionize cryptography but also introduce new security challenges. Additionally, iOS 27 public beta brings Siri AI, raising privacy questions in an increasingly connected world. Authoritative sources like TechCrunch have confirmed the report details, while Wikipedia offers a technical overview of the SS7 protocol.
Sponsored Protocol