Iran Allegedly Tracked U.S. Military Phones via SS7 and Ad-Tech

Investigators suspect Iran or Iranian-aligned actors used commercial advertising data and vulnerable cellular infrastructure to help locate U.S. military personnel during the recent Iran-U.S. conflict. Reporting cited by multiple sources says troops moved from bases into hotels and civilian buildings in locations including Iraqi Kurdistan and Bahrain, where repeated mobile app bid requests may have exposed device identifiers and precise movement patterns through real-time bidding systems. Researchers said social media, human sources, and telecom signaling data were also likely part of the targeting picture, although attribution for specific strikes or attacks remains unconfirmed. Citizen Lab said the activity reflects a long-running weakness in global mobile networks, where **SS7-style** attacks and broader telecom interconnect abuse can still be used to track phones despite years of warnings. The combined reporting underscores that commercially available location data and insecure carrier infrastructure can create a persistent intelligence exposure for deployed personnel, allowing state actors and surveillance vendors to identify, monitor, and potentially target sensitive movements outside traditional military facilities.

Jul 24, 2026

Covert surveillance campaigns abused SS7, Diameter, and SIMjacker-style SMS to track phones

Citizen Lab reported two covert surveillance campaigns that exploited weaknesses in global mobile signalling infrastructure to track targets’ locations across borders. The operations, labeled **STA1** and **STA2**, abused legacy `SS7` and newer `Diameter` protocols, with one campaign also using **SIMjacker-style zero-click binary SMS** and malicious SIM Toolkit commands to try to turn a handset into a covert beacon. Researchers said the activity marks the first time real-world attack traffic has been directly linked to mobile operator signalling systems, showing attackers impersonating operators, rotating identities across countries, manipulating routing paths, and evading signalling firewalls while exploiting weak authentication and trusted telecom interconnect relationships. The campaigns were observed using operator identifiers and infrastructure tied to networks in Europe, Africa, the Middle East, and Asia, including telecoms cited as transit or entry points such as **019Mobile**, **Tango Networks U.K.**, and **Airtel Jersey**. Citizen Lab said the activity is consistent with commercial surveillance platforms serving government intelligence customers, and one campaign may have links to an Israeli geo-intelligence provider, though no vendor or operator was conclusively attributed. The researchers warned that abuse of leased or intermediary signalling access, combined with long-standing flaws in roaming trust models, has enabled large volumes of hard-to-detect location tracking that may persist for years across 3G, 4G, and 5G-connected environments.

Apr 24, 2026

Commercial Location Data Exposed U.S. Troops to Surveillance by Foreign Adversaries

The U.S. Department of Defense has confirmed that foreign adversaries used commercially available location data to target and surveil American military personnel in operational theaters, including the Middle East. A newly disclosed U.S. Central Command letter said it had received multiple threat reports involving hostile actors exploiting data collected from phones and computers through the advertising and data-broker ecosystem. Lawmakers led by Senator Ron Wyden and Representative Pat Harrigan said the disclosures amount to the first public confirmation that purchased commercial geolocation data was used against U.S. troops in active war zones, and warned that the ad-tech industry now poses a **national security threat**. The reports say Pentagon safeguards were insufficient: service members were allowed to use personal devices in operational areas, no policy required geolocation to be disabled in active war zones, and even government-issued devices did not fully block advertising-related tracking. Critics said the risk had been documented for years, citing contractor briefings dating back to 2016, demonstrations tracing personnel from U.S. bases to a covert site in Syria, and later studies showing brokers could easily sell sensitive data on service members. The Pentagon said it is moving to a new mobile device management system to better disable location services, but lawmakers warned that broader use of bring-your-own-device policies and weak regulation of data brokers continue to leave troops exposed.

May 28, 2026

Iran Allegedly Tracked U.S. Military Phones via SS7 and Ad-Tech

How this story unfolded

Tracking capabilities reportedly supported strikes that injured U.S. personnel

Iran reportedly tracked U.S. military personnel via telecom and ad-tech systems

Related entities

Threat actors

Organizations

Sources

See the full picture, correlated to your attack surface.

Iran Allegedly Tracked U.S. Military Phones via SS7 and Ad-Tech

How this story unfolded

Tracking capabilities reportedly supported strikes that injured U.S. personnel

Iran reportedly tracked U.S. military personnel via telecom and ad-tech systems

Related entities

Threat actors

Organizations

Sources

See the full picture, correlated to your attack surface.

Iran Allegedly Tracked U.S. Military Phones via SS7 and Ad-Tech

How this story unfolded

Tracking capabilities reportedly supported strikes that injured U.S. personnel

Iran reportedly tracked U.S. military personnel via telecom and ad-tech systems

Related entities

Threat actors

Organizations

Sources

See the full picture, correlated to your attack surface.

Related stories

Iran Allegedly Leveraged Ad-Tech and SS7 Data to Track U.S. Military Phones

Covert surveillance campaigns abused SS7, Diameter, and SIMjacker-style SMS to track phones

Commercial Location Data Exposed U.S. Troops to Surveillance by Foreign Adversaries

Iran Allegedly Tracked U.S. Military Phones via SS7 and Ad-Tech

How this story unfolded

Tracking capabilities reportedly supported strikes that injured U.S. personnel

Iran reportedly tracked U.S. military personnel via telecom and ad-tech systems

Related entities

Threat actors

Organizations

Sources

See the full picture, correlated to your attack surface.

Related stories

Iran Allegedly Leveraged Ad-Tech and SS7 Data to Track U.S. Military Phones

Covert surveillance campaigns abused SS7, Diameter, and SIMjacker-style SMS to track phones

Commercial Location Data Exposed U.S. Troops to Surveillance by Foreign Adversaries