60 Minutes SS7 Demonstration Intercepts US Congressman Ted Lieu's Phone
On 17 April 2016, CBS 60 Minutes aired "Hacking Your Phone," in which Karsten Nohl's SRLabs team in Berlin, knowing only the number of an iPhone lent to Rep. Ted Lieu (with his consent), tracked the device and recorded his calls via SS7.
02Deep-Dive Technical Analysis
SS7 Mobile Application Part (MAP) assumes every interconnected operator is trusted, so any party holding SS7 interconnect access can send MAP queries about a subscriber to the home network. Serving-cell information returned by HLR/VLR procedures reveals location, and manipulation of forwarding or subscriber data can route voice through an intermediate leg. Nohl's team used these long-known weaknesses, publicly disclosed at 31C3 in December 2014, to record both sides of a call between correspondent Sharyn Alfonsi and Lieu and to log numbers calling him. Critics noted the attack still requires SS7 access.
03Vulnerability & Exploit Flow
Unauthenticated SS7 MAP signaling, trusted by design between operators, used to locate a handset and divert its calls.
04Recommended Defense & Mitigation Protocol
SS7 signaling firewalls with GSMA FS.11 category filtering, SMS home routing, and end-to-end encrypted calling for high-risk users.
05Security Impact & Geopolitical Consequence
06Authoritative Standards & External References
07Related Topic Cluster Records
Master 5G Core, SS7 Defense & Subsea Cable Auditing
Ready to turn your historical knowledge into certified hands-on expertise? Register free on TelcoSec Academy to access interactive lab challenges, or consult our enterprise team for carrier-grade signaling assessments and portable BTS hardware.