GoKawiilReport details how SS7 and Diameter flaws let attackers track and intercept phones
Telecom signaling protocols SS7 and Diameter, used for carrier-to-carrier routing since the 1970s and 1990s respectively, can be exploited to locate phones, intercept SMS two-factor codes, and impersonate numbers without malware or phishing. The report notes these flaws were reportedly used by Iranian-linked actors to locate US personnel during the Iran war, and were previously demonstrated publicly when YouTuber Veritasium hijacked a tech influencer's calls and texts using only his phone number.