SilentAir Hijacks Asian Telecom Networks to Intercept SMS 2FA Codes and Spy on Taiwanese Users

SilentAir is a newly identified cyber espionage group assessed by Enea to be a state-level actor, likely operating with ties to China, that has hijacked telecom infrastructure in at least six Asian countries to intercept SMS two-factor authentication codes and conduct surveillance. The group exploited SS7 and Diameter signaling protocols via compromised equipment within mobile operators' networks, enabling them to redirect calls and texts by spoofing location update messages. SilentAir conducted large-scale silent SMS operations, primarily targeting users in Taiwan, using disguised messages to verify interception success without alerting victims. The group's activity aligns with China Standard Time and overlaps temporally with known Liminal Panda intrusions, though definitive attribution remains unconfirmed.

AI-extracted · verify before operational use