# Iran exploits SS7 to track US troops

Published: 2026-07-24 · Severity: medium · Sectors: defense, telecommunications
Canonical: https://vorant.io/reports/2467c886-2667-57e8-9622-3db934c92b22/iran-exploits-ss7-to-track-us-troops

> Citizen Lab researcher describes Iran using SS7 cellular network flaws to locate US military personnel during the Iran conflict.

In an interview with Cape Cellular, Citizen Lab senior fellow Gary Miller detailed how Iran has leveraged longstanding vulnerabilities in the global SS7 telecom interconnect protocol to track the location of US military personnel during recent hostilities. SS7, a signaling protocol dating to the 1970s that underpins international roaming and call routing, has been publicly known to be exploitable for over fifteen years, yet mobile operators have failed to fully remediate the underlying weaknesses.

Miller also referenced a related Citizen Lab report on commercial surveillance vendors that abuse the same interconnect ecosystem to geolocate and track targets on behalf of paying clients, illustrating that both state actors and private surveillance firms continue to exploit the same infrastructure gaps. He characterized the persistence of these attacks as evidence of a systemic, industry-wide security failure among mobile network operators rather than an isolated incident.

The piece is an analyst commentary rather than a technical incident report, with no specific indicators, malware, or CVEs disclosed. Its significance lies in reaffirming that SS7-based location tracking remains a viable and actively used capability against high-value targets, including military personnel, despite years of public awareness and available mitigations such as SS7 firewalls.

## Mentioned in this report

- Threat actors: Iran

Source reporting: https://citizenlab.ca/how-iran-uses-cellular-infrastructure-to-target-us-military-phones

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/2467c886-2667-57e8-9622-3db934c92b22/iran-exploits-ss7-to-track-us-troops.
Full IOC sets, deployable detections, the entity graph, TAXII 2.1 feed and real-time alerts: https://vorant.io/signup