[ RECORD YEAR ]2004
🇬🇷 GreeceVoice Plane

The Greek Watergate (Vodafone Greece Wiretapping Incident)

Rogue software patches in Vodafone Greece's Ericsson AXE-10 switches activated dormant Lawful Interception capability to wiretap the Greek Prime Minister and 100+ senior officials during the 2004 Athens Olympics period.

THREAT SEVERITY
9.6 / 10
Target TechnologyEricsson AXE-10 Exchange Switches, Lawful Interception Subsystem
OSI Network LayerLayer 7 / Digital Exchange Subsystem
Threat Actor / AttributionForeign State Intelligence Service
Protocol StandardETSI ES 201 671 Lawful Interception

01Video Presentation & Conference Keynote

02Deep-Dive Technical Analysis

Unauthorized software injected into Vodafone Greece AXE-10 switches activated dormant Lawful Interception builds to mirror calls from PM Karamanlis's circle to 14 shadow burner numbers around Athens, with billing and audit records suppressed. The implants erased their own audit trails and implicated insider access to both Vodafone's OSS and Ericsson exchange source code; attribution remains open. When discovered in March 2005, a remote network-wide software upgrade — accidentally or deliberately — wiped the implants before forensic capture.

03Vulnerability & Exploit Flow

Exploit Vector

Malicious firmware patch in exchange Lawful Interception gateways.

04Recommended Defense & Mitigation Protocol

Operator Hardening Strategy

Cryptographic code signing of switch binaries and independent ADAE auditing.

05Security Impact & Geopolitical Consequence

Exposed Lawful Interception gateways as attack surface rather than safety feature, directly shaping EU guidance on intercept hardening and the principle that interception capability must itself be secured and audited.

06Authoritative Standards & External References

07Related Topic Cluster Records

TelcoSec Global Ecosystem · Academy & Enterprise Audits

Master 5G Core, SS7 Defense & Subsea Cable Auditing

Ready to turn your historical knowledge into certified hands-on expertise? Register free on TelcoSec Academy to access interactive lab challenges, or consult our enterprise team for carrier-grade signaling assessments and portable BTS hardware.

Hands-on SS7, Diameter & 5G SBA Firewall Defense
5G SA Zero Trust Security Architecture & ProLabs
Enterprise Carrier Auditing & Rogue Base Station Interception
Explore SaaS Academy Labs?Enterprise Consultancy (telco-sec.com)?
SaaS Academy free tier · Enterprise audits for operators