Iran’s digital shadow war.

How Tehran exploited telecom loopholes and Ad Tech to track US forces.

In the tense weeks leading up to the US-Israeli conflict with Iran earlier this year, Tehran demonstrated a new dimension of warfare: cyber surveillance through mobile networks and advertising technology. Reports from cybersecurity researchers reveal that Iranian operatives tapped into outdated telecom infrastructure across the Middle East, enabling them to monitor the movements of American military personnel stationed in the region.

At the heart of this operation were SS7 pings, silent signals transmitted through global telecom systems that can confirm whether a phone is active and pinpoint its location. According to Gary Miller, founder of the Mobile Surveillance Monitor, Gulf networks were inundated with such requests, many of which could be traced back to Iranian operators. This pattern suggested a deliberate campaign to track specific US devices, particularly in Bahrain, home to the US Navy’s Fifth Fleet.

The timing was critical. As missiles and drones struck American bases in Iraq and Bahrain, Iran’s ability to locate personnel through mobile signals added a dangerous layer of precision to its attacks. Nikita Shah, a researcher at the Centre for Strategic and International Studies, noted that Tehran’s tactics reflect a growing sophistication in cyberwarfare, blending traditional military strikes with digital espionage.

Beyond telecom exploits, Iran reportedly leveraged advertising identifiers embedded in smartphones. These IDs, originally designed for targeted marketing, can reveal the location of individual devices or clusters of users. While the US itself has used such data for surveillance, lawmakers now warn that adversaries turning the same tools against American forces pose a grave national security risk.

Senator Ron Wyden emphasized that this marks the first known instance of a foreign power weaponizing commercial location data in wartime. Representative Pat Harrigan echoed the concern, calling for legislation to prevent tech companies from selling the “digital footprints” of government employees. Both warned that unchecked exploitation of these vulnerabilities could prove catastrophic.

US Central Command acknowledged receiving multiple threat reports regarding the adversary’s use of commercial data but insisted that protective measures were in place to safeguard personnel. Officials downplayed claims that tracking directly influenced attacks, yet the episode underscores how everyday technologiesonce considered harmlesscan become instruments of war.

The conflict has revealed a sobering truth: in modern battlefields, smartphones are not just communication tools but potential liabilities. Iran’s campaign highlights the urgent need for stronger safeguards in telecom systems and stricter controls on commercial data, lest adversaries continue to turn digital shadows into deadly weapons.