Surveillance vendors caught abusing access to telcos to track people’s phone locations, researchers say

Researchers at The Citizen Lab have uncovered a shocking case of surveillance vendors exploiting the backbone of cellular networks to spy on people's phone locations, with at least two separate vendors caught abusing access to telcos to track several victims across the world, including a journalist and a human rights activist. The victims were located in multiple countries, including the United States, Mexico, and Iraq. This abuse of access has significant implications for the security and privacy of individuals around the world. The Citizen Lab found that the surveillance vendors were using a technique called SS7 tracking, which allows them to track a phone's location by exploiting a vulnerability in the SS7 protocol used by cellular networks. The Implications of Surveillance The fact that surveillance vendors are exploiting the backbone of cellular networks to spy on people's phone locations has serious implications for the security and privacy of individuals around the world. For example, in 2020, it was reported that over 20,000 phone numbers were targeted by surveillance vendors using the SS7 tracking technique. This number is likely much higher now, given the increasing demand for surveillance services. The use of SS7 tracking also raises concerns about the ability of governments and other organizations to track the locations of journalists, human rights activists, and other individuals who may be at risk of persecution. Background on Surveillance Vendors The use of surveillance vendors to track people's phone locations is not a new phenomenon, but the fact that they are exploiting the backbone of cellular networks to do so is a significant escalation of their tactics. In 2019, it was reported that several surveillance vendors were using the SS7 protocol to track the locations of phones, but at the time, it was not clear how widespread the practice was. Since then, there have been numerous reports of surveillance vendors using the SS7 protocol to track the locations of phones, including a report by The Citizen Lab in 2020 that found that several surveillance vendors were using the technique to track the locations of phones in multiple countries. What to Expect Next The discovery that surveillance vendors are exploiting the backbone of cellular networks to spy on people's phone locations is likely to lead to increased scrutiny of the surveillance industry and calls for greater regulation of the use of surveillance technologies. For example, in the European Union, there are already laws in place that regulate the use of surveillance technologies, including the General Data Protection Regulation, which requires companies to obtain consent from individuals before collecting and using their personal data. In the United States, there are also laws in place that regulate the use of surveillance technologies, including the Foreign Intelligence Surveillance Act, which requires the government to obtain a warrant before collecting and using the personal data of individuals. The Future of Surveillance The use of surveillance vendors to track people's phone locations is a significant threat to the security and privacy of individuals around the world, and it is likely to continue to be a major issue in the future. The fact that surveillance vendors are exploiting the backbone of cellular networks to spy on people's phone locations is a wake-up call for individuals and organizations to take steps to protect themselves from surveillance. One clear takeaway from this discovery is that individuals and organizations need to be aware of the risks of surveillance and take steps to protect themselves, including using encryption and other security measures to protect their personal data. The Regulation of Surveillance The regulation of surveillance is a complex issue, and it is likely to be the subject of much debate in the future. The fact that surveillance vendors are exploiting the backbone of cellular networks to spy on people's phone locations highlights the need for greater regulation of the surveillance industry. For example, in 2020, the European Union introduced new regulations on the use of surveillance technologies, including a requirement that companies obtain consent from individuals before collecting and using their personal data. In the United States, there are also calls for greater regulation of the surveillance industry, including a bill introduced in Congress that would require the government to obtain a warrant before collecting and using the personal data of individuals. Conclusion The discovery that surveillance vendors are exploiting the backbone of cellular networks to spy on people's phone locations is a significant threat to the security and privacy of individuals around the world, and it highlights the need for greater regulation of the surveillance industry. The fact that surveillance vendors are using the SS7 protocol to track the locations of phones is a wake-up call for individuals and organizations to take steps to protect themselves from surveillance. One clear takeaway from this discovery is that individuals and organizations need to be aware of the risks of surveillance and take steps to protect themselves, including using encryption and other security measures to protect their personal data. The Impact on Individuals The impact of surveillance on individuals can be significant, and it is likely to be felt for a long time. The fact that surveillance vendors are exploiting the backbone of cellular networks to spy on people's phone locations is a significant threat to the security and privacy of individuals around the world. For example, in 2019, it was reported that a journalist was targeted by a surveillance vendor using the SS7 tracking technique, and the journalist's phone was tracked for several months without their knowledge or consent. This type of surveillance can have a significant impact on an individual's life, and it highlights the need for greater regulation of the surveillance industry. The Need for Regulation The need for regulation of the surveillance industry is clear, and it is likely to be the subject of much debate in the future. The fact that surveillance vendors are exploiting the backbone of cellular networks to spy on people's phone locations highlights the need for greater regulation of the surveillance industry. For example, in 2020, the European Union introduced new regulations on the use of surveillance technologies, including a requirement that companies obtain consent from individuals before collecting and using their personal data. In the United States, there are also calls for greater regulation of the surveillance industry, including a bill introduced in Congress that would require the government to obtain a warrant before collecting and using the personal data of individuals. The Importance of Awareness The importance of awareness of the risks of surveillance cannot be overstated, and it is likely to be a major issue in the future. The fact that surveillance vendors are exploiting the backbone of cellular networks to spy on people's phone locations is a wake-up call for individuals and organizations to take steps to protect themselves from surveillance. For example, in 2019, it was reported that a human rights activist was targeted by a surveillance vendor using the SS7 tracking technique, and the activist's phone was tracked for several months without their knowledge or consent. This type of surveillance can have a significant impact on an individual's life, and it highlights the need for greater awareness of the risks of surveillance.