Feed›Network & Infrastructure›Covert telecom spying campaign “Ghost Operators” tracks user...
Network & InfrastructureCyber Insider
9.5 — CRITICAL

Covert telecom spying campaign “Ghost Operators” tracks users worldwide

📅 24 April 2026 at 09:54 UTC📰 Cyber InsiderView original source ↗
Covert telecom spying campaign “Ghost Operators” tracks users worldwide

Citizen Lab has identified two advanced surveillance campaigns abusing weaknesses in global telecom networks to track mobile users and, in some cases, turn SIM cards into silent spying tools. The investigation began in late 2024 after anomalous activity was detected in signaling firewall logs, with additional data provided by telecom security firm Cellusys. By analyzing … The post Covert telecom spying campaign “Ghost Operators” tracks users worldwide appeared first on CyberInsider.

🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview

Two advanced surveillance campaigns, 'Ghost Operators' STA1 and STA2, have been identified abusing weaknesses in global telecom networks to track mobile users worldwide, exploiting SS7 and Diameter signaling protocols without malware or device compromise.

⚙️Technical Details
Affected Systems
Global telecom networks
Attack Vectors
SS7 (3G) and Diameter (4G) signaling protocolsManipulation of signaling identifiers and routing paths
💥Impact Assessment
Severity: Critical
Who Is at Risk
High-profile executives, general public using mobile services worldwideSeverity: Critical
🛡️Recommended Actions
1Implement stronger validation controls for third-party access
2Upgrade firewall protections to prevent exploitation of telecom protocols
3Enforce stricter regulations on telecom surveillance operations
📦Affected Products
SIM cardsTelecom networks

Read the full article

This is a curated summary. The complete article is available at Cyber Insider.

Read on Cyber Insider ↗
← Back to feed