The Financial Times has reported that mobile phone networks across the Middle East were subjected to a large-scale wave of cyber attacks at the same time as US and Israeli strikes against the Islamic Republic of Iran.
Kabul 24: The primary objective of these attacks was to identify the locations of American troops and their contractors operating in the region.
According to the report, US officials and cybersecurity experts believe that Iran or affiliated actors exploited vulnerabilities in telecommunications networks and commercial location data to track American personnel.
This operation occurred during a period of heightened military tensions, where real-time location information could provide significant tactical advantages.
Data from the research project “Mobile Surveillance Monitor,” made available to the Financial Times, reveals that telecom networks in the region blocked a surge of so-called “SS7 Ping” requests.
These requests are typically used to determine the position of mobile phones operating outside their home networks via roaming services. While such queries occur under normal circumstances, the volume and pattern observed were highly unusual.
Two cybersecurity experts who analyzed the data stated that the timing, volume, and targeting of these requests strongly indicate a coordinated campaign aimed at tracking specific users.
The focus appears to have been on devices linked to US military personnel and associated contractors, suggesting a deliberate effort to gather sensitive operational intelligence during active conflict.
The incidents have raised serious concerns about the security of mobile communications in conflict zones. Networks once considered relatively secure for military and diplomatic coordination are now viewed as vulnerable entry points.
Experts warn that the continued exploitation of legacy protocols like SS7 remains one of the most significant global cybersecurity challenges. Many operators in the Middle East have yet to implement sufficient protections against such abuses.
This development underscores the urgent need to strengthen cybersecurity infrastructure and adopt more secure communication protocols, especially during crises. US authorities have indicated they are investigating the attacks and implementing additional measures to protect personnel.
However, the increasing use of commercial location data by state actors represents a serious threat to both privacy and operational security for military forces worldwide.
The episode highlights how cyber operations are now deeply integrated with conventional military actions.
As conflicts intensify, the battle for information dominance extends far beyond the physical battlefield into the digital domain, where mobile networks have become a critical front line.
