Iran Exploits Telecom Vulnerabilities to Track US Military Personnel

• •Iran exploited SS7 vulnerabilities to track U.S. military personnel during the Iran War.
• •The surveillance campaign began in late February 2026, coinciding with heightened military activity.
• •U.S. lawmakers are pushing for stronger protections against foreign surveillance of military personnel.

Iranian government actors reportedly exploited vulnerabilities in global telecommunications infrastructure to locate U.S. military personnel during the lead-up to and early stages of the Iran War. The attacks utilized Signaling System 7 (SS7) protocols, which are crucial for routing calls and texts in 2G and 3G networks. This allowed Iran to track U.S. forces stationed in military bases and hotels across Iraq, Bahrain, and other Middle Eastern countries, leading to targeted strikes that resulted in injuries. Additionally, Iran leveraged commercial advertising technology to gather location data on U.S. personnel. The campaign raised significant concerns about the security of mobile networks and the potential for hostile surveillance. U.S. lawmakers are advocating for tighter safeguards against such vulnerabilities. The surveillance campaign reportedly began in late February 2026, coinciding with increased military tensions in the region.