SilentAir Group Compromes Asian Telecom Infrastructure for Targeted Surveillance

According to The Hacker News, a sophisticated espionage network identified as SilentAir has compromised telecommunications infrastructure across multiple Asian nations, enabling the interception of targeted communications. The Swedish cybersecurity firm Enea detected the intrusion within its software systems, attributing the attacks to compromised equipment inside mobile operator networks. The investigation revealed that the group successfully accessed the calls and text messages of specific individuals, with a significant portion of the surveillance activity focused on users in Taiwan.

Enea published its findings this week, detailing that the attack sources were located in at least six different Asian countries. The company’s analysis suggests that the operators have been infiltrated to allow for the real-time monitoring of private communications. By exploiting vulnerabilities within the telecom software, the threat actors have gained the ability to bypass standard security measures, effectively turning legitimate network infrastructure into a tool for mass surveillance of selected targets.

Based on the technical characteristics and scope of the intrusion, Enea has assessed with high confidence that SilentAir is a state-level actor. This attribution implies that the spying campaign is likely backed by government resources, reflecting a strategic effort to gather intelligence through telecommunications intercepts. The use of hacked equipment within major mobile operators highlights the critical vulnerabilities present in global communication networks. Such access allows for the collection of sensitive data, including two-factor authentication codes and private conversations, posing significant privacy risks to the targeted demographic. The disclosure serves as a critical warning for telecom providers to audit their software integrity and secure their internal networks against advanced persistent threats.