#DHS Says #China, #Russia, #Iran, and #Israel Are Spying on People in #US with #SS7

https://www.404media.co/dhs-says-china-russia-iran-and-israel-are-spying-on-people-in-us-with-ss7/

#cybersecurity #privacy

"The Department of Homeland Security (DHS) believes that China, Russia, Iran, and Israel are the “primary” countries exploiting security holes in telecommunications networks to spy on people inside the United States, which can include tracking their physical movements and intercepting calls and texts, according to information released by Senator Ron Wyden.

The news provides more context around use of SS7, the exploited network and protocol, against phones in the country. In May, 404 Media reported that an official inside DHS’s Cybersecurity Insurance and Security Agency (CISA) broke with his department’s official narrative and publicly warned about multiple SS7 attacks on U.S. persons in recent years. Now, the newly disclosed information provides more specifics on where at least some SS7 attacks are originating from."

https://www.404media.co/dhs-says-china-russia-iran-and-israel-are-spying-on-people-in-us-with-ss7/

#USA #CyberSecurity #DHS #SS7 #MobilePhones #Surveillance

404 Media: DHS Says China, Russia, Iran, and Israel Are Spying on People in US with SS7
The Department of Homeland Security (DHS) believes that China, Russia, Iran, and Israel are the "primary" countries exploiting security holes in telecommunications networks to spy on people inside the United States, which can include tracking their physical movements and intercepting calls and texts, according to information released by Senator Ron Wyden.
Senator Wyden’s office says the DoD confirmed it believes that all U.S. carriers are vulnerable to Signaling System 7 (SS7) and Diameter surveillance, and that DoD has not reviewed third-party audits carried out by U.S. carriers of their own networks.

SS7 is used to route messages when a phone user roams outside of their area of normal coverage. But it is also leveraged by governments, surveillance contractors, and financially motivated criminals to target phones too. These malicious parties gain access to SS7 through legitimate telecommunications companies or even operating their own. They lease access to a Global Title, which is essentially an address to route messages with. With that access, attackers may be able to track a phone and person's location, or intercept their communications armed with just their phone number. SS7 attacks are also used to deliver malware that can then infect the target’s mobile device itself.

#nationalsecurity #threatintel #news #privacy #infosec #cybersecurity #russia #china #iran #israel #ss7

"#China #Russia #Iran & #Israel are spying on Americans using telecom weaknesses.
-DHS

All US carriers vulnerable to some extent.

We know this thanks to Sen
Wyden's tireless work to expose #SS7 & #Diameter vulnerabilities.

Global NET for routing calls:

Requests are trusted by default. Whatever operator they come from!

Since requests can let you do things like intercept calls, texts & track phones locations..."
-J Scott-Railton

#Telecommunications #Surveillance

https://www.404media.co/dhs-says-china-russia-iran-and-israel-are-spying-on-people-in-us-with-ss7/