Iranian Hackers Tracked US Military Using Telecom Vulnerabilities

The Mobile Surveillance Monitor, a nonprofit research initiative, identified a coordinated campaign involving a wave of location requests targeting US personnel stationed across the Middle East. Cybersecurity researcher Gary Miller noted that the data revealed highly specific targeting, with some tracking attempts linked directly to an Iranian mobile operator. These silent queries allow adversaries to confirm if a device is active and determine its precise location in real time.

This surveillance activity intensified during the build-up to the conflict between the US and Iran in late February. Tehran and its regional proxies have utilized this intelligence to launch missile and drone strikes against US military installations, including the US Navy’s Fifth Fleet base in Bahrain. Nikita Shah of the Centre for Strategic and International Studies described the shift as a marked increase in the sophistication of Iranian cyberwarfare, which now poses a direct kinetic threat to personnel stationed within striking distance.

American lawmakers have expressed urgent concern regarding the vulnerability of smartphones to commercial location data harvesting. Senator Ron Wyden warned that this represents a precedent-setting use of commercial data by an adversary to target US forces during wartime. In response, Representative Pat Harrigan is drafting legislation to restrict tech companies from selling the digital footprints of government employees. While US Central Command acknowledged receiving threat reports regarding the exploitation of commercial data, officials maintained that such tracking did not play a definitive role in the success of recent attacks against US installations.