China Accused of Spying On Americans Via Caribbean Phone Networks

"A mobile security expert has accused China of exploiting cellphone networks in the Caribbean to conduct 'mass surveillance' on Americans," reports Newsweek:

Gary Miller, a former vice president of network security at California-based analytics company Mobileum, told The Guardian he had amassed evidence of espionage conducted via "decades-old vulnerabilities" in the global telecommunications system. While not explicitly mentioned in the report, the claims appear to be centered around Signaling System 7 (SS7), a communications protocol that routes calls and data around the world and has long been known to have inherent security weaknesses.

According to Miller, his analysis of "signals data" from the Caribbean has shown China was using a state-controlled mobile operator to "target, track, and intercept phone communications of U.S. phone subscribers," The Guardian reported. Miller claimed China appeared to exploit Caribbean operators to conduct surveillance on Americans as they were traveling, alleging that attacks on cell phones between 2018 to 2020 likely affected "tens of thousands" of U.S. mobile users in the region.

"Once you get into the tens of thousands, the attacks qualify as mass surveillance," the mobile researcher said, noting the tactic is "primarily for intelligence collection and not necessarily targeting high-profile targets."

Interesting quote from the Guardian's original story:
"We have an illusion of security when we talk on our mobile phones," said James Lewis, the director of the Strategic Technologies Program at the Center for Strategic and International Studies (CSIS). "People don't realise that we are under a sustained espionage attack on anything that connects to a network, and that this is just another example of a really aggressive and pretty sophisticated campaign."

Thanks to chill (Slashdot reader #34,294) for the story!

Read more of this story at Slashdot.