SilentAir Hackers Intercept Calls, SMS From Inside Mobile Networks
Source SecurityWeek
Description
SilentAir is a state-level threat actor that hijacks mobile network nodes to intercept phone calls and SMS messages, primarily targeting Taiwanese subscribers. The group exploits signaling protocols such as SS7 and Diameter to route communications through compromised nodes, harvesting subscriber details and tracking locations. Silent SMS messages are also sent to verify interception success. The actor has targeted operators in at least six Asian countries and a dozen other countries globally, including high-profile political and government figures. The activity has been monitored since early 2025. SilentAir may be connected to another China-nexus group, Liminal Panda, which exploits mobile operator infrastructure as well.