IMSI Catchers — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
4
occurrences
First Seen
January 21, 2026
Last Seen
June 17, 2026

IMSI Catchers are mobile-surveillance devices that impersonate legitimate cellular base stations to coax nearby mobile devices into connecting, enabling the collection of subscriber data (IMSI/IMEI), location tracking, and interception of communications.

IMSI Catchers is a technology platform tracked across 3 threat clusters and 4 intelligence report mentions on ThreatCluster. First observed January 21, 2026; most recent activity June 17, 2026.

Overview

IMSI Catchers are mobile-surveillance devices that impersonate legitimate cellular base stations to coax nearby mobile devices into connecting, enabling the collection of subscriber data (IMSI/IMEI), location tracking, and interception of communications. They are high-risk tools that can enable covert monitoring and data exfiltration, raising substantial privacy and cybersecurity concerns when deployed by authorities or other actors.

Related Threat Clusters

  • Global Surveillance of Journalists Exposed by IFJ Study

    A new study by the International Federation of Journalists (IFJ) reveals a widespread and systemic surveillance infrastructure targeting journalists worldwide. The report, based on interviews and forensic analysis…

    7 articles · Updated April 29, 2026
  • Global Principles on Communications Surveillance and Privacy Rights

    On June 17, 2026, two articles were published addressing the implications of communications surveillance on privacy rights. The first article outlines principles derived from a global consultation, emphasizing that…

    2 articles · Updated June 17, 2026
  • Ireland Proposes New Bill for Police Spyware and Encryption Access

    The Irish government is advancing a new Communications (Interception and Lawful Access) Bill aimed at enhancing police capabilities to intercept communications, including encrypted messages. This bill is intended to…

    3 articles · Updated January 21, 2026

Recent Intelligence Reports

  • Communications Surveillance Distinctions And Definitions — privacyinternational.org · June 17, 2026
  • 'Who the Hell Wants to Talk to Me After This': A Journalist on Challenges after Pegasus Attack — Kashmirtimes · April 29, 2026
  • Ireland wants to give its cops spyware, ability to crack encrypted messages — News.Ycombinator · January 21, 2026
  • Ireland wants to give its cops spyware, ability to crack encrypted messages — Theregister · January 21, 2026

Frequently asked questions

What is IMSI Catchers?

IMSI Catchers are mobile-surveillance devices that impersonate legitimate cellular base stations to coax nearby mobile devices into connecting, enabling the collection of subscriber data (IMSI/IMEI), location tracking, and interception of communications.

Is IMSI Catchers still active?

The most recent intelligence report mentioning IMSI Catchers on ThreatCluster is dated June 17, 2026. Activity was first observed January 21, 2026, giving a tracked span from then to June 17, 2026.

What is IMSI Catchers associated with?

Across ThreatCluster reporting, IMSI Catchers most frequently co-occurs with Malware, Phishing, Zero-day Exploit, Pegasus Project, Belarus, among 12 tracked related entities.

What are the latest developments involving IMSI Catchers?

The most significant recent cluster is “Global Surveillance of Journalists Exposed by IFJ Study” (7 articles · Updated April 29, 2026). IMSI Catchers appears across 3 threat clusters in total, listed above with sources.

How much reporting does ThreatCluster have on IMSI Catchers?

IMSI Catchers appears in 4 intelligence report mentions across 3 deduplicated threat clusters, aggregated from 17,000+ monitored sources.

CVSS v3.1 Breakdown