Asian Telecom Networks Compromised in Widespread SMS Interception Campaign
A sophisticated hacking operation, dubbed SilentAir, has infiltrated several major Asian telecommunications networks, compromising their security and allowing hackers to intercept two-factor authentication (2FA) codes sent via SMS. The campaign, discovered in late October, specifically targets Taiwanese users, but its scope is likely much broader.
The attackers, who remain unknown, exploited vulnerabilities in the telecom companies’ systems to gain unauthorized access. They then used this access to siphon off SMS messages containing 2FA codes, which are meant to add an extra layer of security to online accounts and transactions. With these codes in hand, hackers can bypass traditional password protections and assume control of affected accounts.
The SilentAir operation relies on a technique called cross-domain privilege escalation (CDPE). This involves exploiting differences in access controls between various domains or networks within the same organization. By doing so, attackers can move laterally across systems, evading detection and ultimately reaching sensitive areas where they can exfiltrate valuable data. In this case, the primary goal appears to be the collection of Taiwanese users’ 2FA codes, which would allow hackers to access a wide range of online services.
The compromised networks include several prominent telecom companies in Asia, with Taiwan being the most affected region. This has significant implications for both individuals and businesses, as it creates an entry point for attackers into sensitive accounts. It’s also worth noting that this campaign highlights the ongoing struggle against SMS-based 2FA, a widely adopted security measure whose vulnerabilities have been well-documented.
The SilentAir operation underscores the importance of layered security measures beyond traditional password protection. With SMS interception being a known threat vector, users should consider alternative methods for two-factor authentication, such as time-based one-time passwords or authenticator apps. Furthermore, telecom companies and organizations must prioritize network segmentation and implement robust monitoring tools to detect potential breaches early on.
Source: The Hacker News — 2026-11-13