SilentAir Hijacks Asian Telecom Networks for 2FA Interception

On November 13, 2026, The Hacker News reported that Enea, a Stockholm‑based telecom and cybersecurity software company, had identified a new threat actor called SilentAir. The report said SilentAir exploited compromised equipment inside Asian mobile operators to intercept voice calls and SMS messages, focusing on two‑factor authentication texts sent to Taiwanese users. ¹

The investigation found evidence of compromised infrastructure across at least six countries in Asia, turning carriers’ networks into eavesdropping platforms capable of capturing both metadata and content of communications. ¹

Expert analysis explains how this attack exploits long‑standing weaknesses in Signaling System No. 7 (SS7). SS7 is an older protocol still widely deployed by many carriers worldwide, and its design leaves room for unauthorized message routing and SIM swap triggers. Similar flaws were exposed during Verizon’s 2016 breach by Russian actors; yet many operators have not modernized their systems despite repeated warnings. This means attacks like SilentAir can continue until significant investment occurs in protocol modernization.

The incident raises serious privacy concerns because intercepted 2FA codes allow attackers to bypass multi‑factor protection and gain access to user accounts on services ranging from banking to email. Reading call records could enable targeted phishing or social engineering campaigns against victims identified through metadata. The report stresses that coordinated response measures are urgently required to mitigate further escalation. ¹

For users, the takeaway is clear: two‑factor authentication alone does not guarantee safety if the underlying communication channel can be compromised. Operators must upgrade their SS7 implementations, enforce stricter audit trails, and deploy end‑to‑end encryption where possible. Regulators should push for mandatory disclosure of such vulnerabilities and require telecom companies to conduct regular penetration testing. Until these steps are taken, threats like SilentAir will continue growing in scale and sophistication.