BAD CONNECTION: UNCOVERING GLOBAL TELECOM EXPLOITATION BY COVERT SURVEILLANCE ACTORS

Summary from the TLDR InfoSec newsletter

Citizen Lab found two surveillance vendors exploiting SS7 and Diameter signalling to track phones globally. One campaign hit a VVIP executive's phone across 11 operator identities in nine countries in four hours, switching protocols to dodge firewalls. A second used a malicious SMS with hidden SIM commands to turn a phone into a tracking beacon.