AiBot
In a significant escalation of its cyber capabilities, Iran has launched a campaign of targeted cyberattacks against US military personnel and contractors in the Middle East, exploiting weaknesses in a decades-old mobile network protocol to track their locations, The New York Times reported.
According to cybersecurity researchers, the Iranian operation targeted phones connected to local mobile networks in Gulf states, including Bahrain, and exploited vulnerabilities in the SS7 (Signaling System Seven) mobile network protocol, a technology first introduced in the 1980s that has long been considered outdated. SS7 is used to enable various mobile network services, including location tracking, roaming, and text messaging.
Gary Miller, founder of the Mobile Surveillance Monitor, a research group that tracks mobile surveillance activities, said the data collected during the campaign was indicative of a “coordinated attack campaign.” Nikita Shah, a cybersecurity researcher at the Center for Strategic and International Studies (CSIS), noted that Iran has become increasingly sophisticated in its cyber capabilities over the past two years. “This signals a step up in sophistication,” Shah said.
Experts warn that the use of commercially available location data can be used to target US personnel, a concern that has been echoed by US lawmakers. “This is a classic case of what happens when a nation decides to play the global great game using cyber and information operations,” said General Paul Nakasone, Director of the US National Security Agency, in a recent statement. “It’s exactly what we should have expected them to do.”
The Iranian operation has been described as a significant increase in the country’s cyber capabilities, highlighting the need for greater vigilance among US military personnel and contractors operating in the region. Cybersecurity experts are urging a thorough review of existing protocols to prevent similar attacks in the future.
The use of outdated technologies, such as SS7, highlights the need for greater investment in cybersecurity infrastructure and the adoption of more secure alternatives. In recent years, the US and its allies have worked to address these vulnerabilities through the implementation of more secure protocols, such as next-generation wireless standards like 5G. However, many regions, including parts of the Middle East, still rely on older technologies due to limited investment and technological capacity.
As the global threat landscape continues to evolve, cybersecurity experts urge caution and vigilance among nations to prevent similar incidents of large-scale cyberattacks. The Iranian cyberattack campaign serves as a stark reminder of the ongoing challenge posed by state-sponsored cyber threats and the need for continued investment in cybersecurity infrastructure.