First Wap Tracks Phones Around the World
2 days ago
- #telecom-security
- #data-privacy
- #surveillance
- Lighthouse Reports uncovered a vast archive of data from First Wap, a Jakarta-based surveillance company, revealing global phone tracking activities.
- First Wap's tool, Altamides, tracks phone locations without device traces, intercepts messages/calls, and breaches encrypted apps like WhatsApp.
- The investigation analyzed 1.5M rows of telecom data, identifying 1,500+ high-confidence targets, including dissidents, journalists, and executives.
- First Wap exploits SS7 protocol vulnerabilities, using Global Titles (GTs) leased from operators to send unauthorized location queries worldwide.
- Tracking accuracy varies by cell tower density; urban areas offer precision, while rural zones may only provide broad estimates.
- The dataset exposed misuse cases, such as automated tracking of Vatican journalist Gianluigi Nuzzi and Rwandan opposition figures targeted for assassination.
- Telecom Liechtenstein suspended ties with First Wap post-investigation, while the company denied hacking SS7 or serving repressive regimes.
- UK banned GT leasing to curb surveillance abuses, but global telecom security gaps persist, disproportionately impacting the Global Majority.