SilentAir Hackers Intercept Calls, SMS From Inside Mobile Networks
Telecom software and cybersecurity company Enea has detailed the activity of a previously unknown threat actor that intercepts phone calls and text messages through compromised mobile operator infrastructure, with Taiwan as its main target.
The company tracks the group as SilentAir and assesses with high confidence that it’s a new state-level actor.
Enea’s researchers also believe, with low confidence, that SilentAir’s activity is aligned with China-nexus operations. Their reasons include the hackers’ interest in Taiwan, the absence of Chinese targets, and attack timing consistent with a workday in China’s time zone.
SilentAir launches its signaling attacks, mostly over SS7 and sometimes over Diameter, from network nodes it has hijacked at mobile operators. The attacks route a target’s incoming calls and SMS messages through the compromised node and harvest subscriber details.
The hackers can also track a target’s location, but this makes up only a small part of their activity. They...
Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE
