Iran Exploited Mobile Networks to Track US Troops During Conflict

Hostile actors linked to Iran executed a coordinated cyber campaign against Middle Eastern cellular networks to pinpoint the exact locations of U.S. military personnel.

The digital surveillance operations targeted legacy roaming protocols and commercial advertising databases throughout the recent conflict.

Exploiting Roaming Architecture

Telecom intercepts obtained by the Mobile Surveillance Monitor project revealed a sustained barrage of SS7 pings targeting regional operators.

These specific network requests exploit vulnerabilities in early cellular infrastructure to extract rough geographical coordinates of roaming devices.

Independent cybersecurity experts analyzed the data and concluded the activity represented a highly organized tracking initiative.

Gulf officials assess that Iranian entities or allied militias leveraged existing telecom roaming agreements across the region to locate American forces.

The digital fingerprint of at least some intercepted tracking attempts matched a known Iranian mobile provider.

The espionage campaign escalated prior to the late February U.S.-Israeli military operations against Iran.

The network incursions then continued as Tehran launched retaliatory drone and missile bombardments on American military installations.

Gary Miller, a senior researcher at Citizen Lab, examined the network intercepts and identified a deliberate focus on specific devices.

“Iran absolutely has capabilities to get real-time, immediate, and continuous location information,” Miller stated.

Ad Tech Vulnerability

The surveillance operation extended beyond structural network flaws. American officials indicate that Iranian operatives exploited commercial advertising databases to track smartphones in Iraqi Kurdistan.

Advertising technology assigns unique identification numbers to mobile devices. This data allows purchasers to monitor specific handsets or hardware clusters via routine digital emissions.

During the conflict, U.S. Central Command dispersed troops to commercial hotels to mitigate operational risks. Iranian forces and regional proxies subsequently targeted several of these civilian lodgings in Iraq, Bahrain, and the wider Gulf.

A missile strike directly hit the Manama Crowne Plaza in Bahrain. Procurement records confirm the facility held multiple Defense Department contracts to service military personnel.

American contractors and service members sustained injuries in these regional strikes.

Strategic Consequences

Centcom informed Congress in April of numerous intelligence reports detailing the adversary's exploitation of commercial location data.

However, an anonymous US defense official denied that digital tracking directly facilitated the kinetic strikes.

Lawmakers argue the network breaches highlight severe operational vulnerabilities.

Senator Ron Wyden noted this incident represents the first known instance of hostile forces using commercial location data against American troops in a combat zone.

“For years I’ve warned both Democratic and Republican administrations about the national security threat posed by foreign adversaries tracking the phones of U.S. personnel,” Wyden said.

A 2024 Defense Department inspector general review concluded the military has failed to secure its government-issued mobile devices.

Michael Stokes, a former CIA official, noted personnel frequently carry personal smartphones into operational environments, generating a highly trackable digital footprint.

“This is a national security exposure created by unmanaged phones, commercial ad tech, location data, and, of course, operational necessity colliding with the realities of the field,” Stokes said.