Connect with us

Telecom

Hackers Could Decrypt Your GSM Phone Call

Published

on

Kindly share this post

Researchers have discovered a flaw in the GSM standard used by AT&T and T-Mobile that would allow hackers to listen in.

 

Researchers from BlackBerry at DefCon security conference in Las Vegas, USA, presented an attack that can intercept GSM calls as they’re transmitted over the air and decrypt them to listen back to what was said.

 

And the vulnerability has been around for decades.

 

Most mobile calls around the world are made over the Global System for Mobile Communications standard; in the US, GSM underpins any call made over AT&T or T-Mobile’s network.

 

Regular GSM calls aren’t fully end-to-end encrypted for maximum protection, but they are encrypted at many steps along their path, so random people can’t just tune into phone calls over the air like radio stations.

 

The researchers found, though, that they can target the encryption algorithms used to protect calls and listen in on basically anything.

 

“GSM is a well documented and analyzed standard, but it’s an aging standard and it’s had a pretty typical cybersecurity journey,” says Campbell Murray, the global head of delivery for BlackBerry Cybersecurity.

 

“The weaknesses we found are in any GSM implementation up to 5G. Regardless of which GSM implementation you’re using there is a flaw historically created and engineered that you’re exposing.”

 

The problem is in the encryption key exchange that establishes a secure connection between a phone and a nearby cell tower every time you initiate a call.

 

This exchange gives both your device and the tower the keys to unlock the data that is about to be encrypted. In analyzing this interaction, the researchers realized that the way the GSM documentation is written, there are flaws in the error control mechanisms governing how the keys are encoded. This makes the keys vulnerable to a cracking attack.

 

“It’s a really good example of how the intention is there to create security, but the security engineering process behind that implementation failed.”

 

As a result, a hacker could set up equipment to intercept call connections in a given area, capture the key exchanges between phones and cellular base stations, digitally record the calls in their unintelligible, encrypted form, crack the keys, and then use them to decrypt the calls.

 

The findings analyze two of GSM’s proprietary cryptographic algorithms that are widely used in call encryption—A5/1 and A5/3.

 

The researchers found that they can crack the keys in most implementations of A5/1 within about an hour. For A5/3 the attack is theoretically possible, but it would take many years to actually crack the keys.

 

“We spent a lot of time looking at the standards and reading the implementations and reverse engineering what the key exchange process looks like,” BlackBerry’s Murray said.

 

“You can see how people believed that this was a good solution. It’s a really good example of how the intention is there to create security, but the security engineering process behind that implementation failed.”

 

The researchers emphasize that because GSM is such an old and thoroughly analyzed standard, there are already other known attacks against it that are easier to carry out in practice, like using malicious base stations, often called stingrays, to intercept calls or track a cellphone’s location.

 

Additional research into the A5 family of ciphers over the years has turned up other flaws as well. And there are ways to configure the key exchange encryption that would make it more difficult for attackers to crack the keys. But Murray says that the theoretical risk always remains.

 

Short of totally overhauling the GSM encryption scheme, which seems unlikely, the documentation for implementing A5/1 and A5/3 could be revised to make key interception and cracking attacks even more impractical. The researchers say that they are in the early phases of discussing the work with the standards body GSMA.

 

The trade association said in a statement to WIRED that, “Details have not been submitted to the GSMA under our coordinated vulnerability (CVD) programme. When the technical details are known to the GSMA’s Fraud and Security Group we will be better placed to consider the implications and the necessary mitigation actions.”

 

Though it may not be that surprising at this point that GSM has security issues, it’s still the cellular protocol used by the vast majority of the world. And as long as it’s around, real call privacy issues remain, too.


Kindly share this post

Nigeria CommunicationsWeek believes that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. So since 2007, we have devoted our energy to independent reportage of technology and how they affect lives.

Telecom

NIGCOMSAT Supports Startups Growth with the Launch of Accelerator 3.0

Published

on

Kindly share this post

The Nigerian Communications Satellite Limited (NIGCOMSAT) has unveiled Accelerator Cohort 3.0 as part of efforts to strengthen Nigeria’s space technology ecosystem and support the growth of local startups.

The initiative will be a major highlight of the 2026 Nigerian Satellite Week scheduled to hold on March 30 and 31 in Abuja, where key players in the satellite and digital infrastructure sectors are expected to converge.

In a statement signed by Stephen Kwande, the Head of Corporate Communications, the company described the new accelerator as its most direct investment in building long-term competitiveness within Nigeria’s space economy.

According to NIGCOMSAT, the programme is designed to support early-stage ventures working across satellite applications, last-mile connectivity, agriculture, logistics and other areas where space-based technology can drive impact.

The company said previous cohorts of the accelerator had already contributed to developing innovative solutions and building the human capacity needed to position Nigeria for the next phase of the global space industry.

“With Cohort 3.0, we are making it clear that the accelerator is not a pilot project but a permanent feature of how Nigeria develops its space-tech companies,” the statement said.

NIGCOMSAT noted that the Nigerian Satellite Week has grown into a major platform for policy discussions, partnerships and investment in the sector.

The 2026 edition is expected to attract top government officials, defence leaders, development finance institutions and technology entrepreneurs from across Africa.

Jane Egerton-Idehen, managing director of NIGCOMSAT, said the event also marks two decades of Nigeria’s journey in the space economy.

“Twenty years ago, Nigeria took a bold step to secure its place in space. What we are seeing today is the result of consistent effort and vision,” she said.

She added that the company is focused on shaping the next phase of growth through innovation, partnerships and investment in local talent.

NIGCOMSAT also highlighted recent milestones, including a Low Earth Orbit connectivity partnership with Eutelsat, improved revenue performance and increased global recognition in satellite operations.

Other activities lined up for the event include a Startup Demo Day, where selected African startups will pitch their ideas to investors, and a stakeholders’ forum to discuss policies and infrastructure needed to scale Nigeria’s satellite economy.

The company said the initiative reflects the growing role of satellite technology in national development, particularly in areas such as communications, security and digital services.

NIGCOMSAT, established in 2006 and wholly owned by the Federal Government, provides satellite-based services including telecommunications, broadcasting and broadband across Nigeria and parts of Africa.


Kindly share this post
Continue Reading

Telecom

FG Unveils Digital Economy Research Fund Scheme

Published

on

Kindly share this post

The Federal Government has unveiled a N12bn Digital Economy Research Fund aimed at strengthening evidence-based policymaking and supporting Nigeria’s long-term digital transformation agenda.

Dr. Bosun Tijani, the Minister of Communications, Innovation, and Digital Economy, disclosed this in a statement issued on Saturday, announcing the launch of an expression of interest for the National Digital Economy Research Clusters.

“Today my heart is filled with deep joy as we announce the Expression of Interest for the National Digital Economy Research Clusters, a N12bn research funding scheme designed to place ideas, evidence, and research at the centre of Nigeria’s digital transformation,” the minister said.

According to him, the programme is being funded under Project BRIDGE, a federal initiative to deploy 90,000 kilometres of fibre optic backbone infrastructure across Nigeria to expand connectivity and enable a modern digital economy.

“This programme is being funded under Project BRIDGE, our initiative to deploy 90,000km of fibre optic backbone infrastructure across Nigeria to expand connectivity and enable a modern digital economy,” he said.

The minister noted that as the government expands digital infrastructure nationwide, research-backed approaches are required to ensure inclusive benefits.

“As we deepen our digital infrastructure coverage, thoughtful, evidence-based approaches are required to be deployed in society to ensure everyone benefits from this significant investment,” he added.

He observed that digital policy decisions are often shaped by market forces and political cycles rather than rigorous research and long-term thinking. “Too often, the ideas shaping digital policy come predominantly from markets and political cycles rather than from research, evidence, and long-term thinking,” the statement said.

Under the initiative, six national research clusters will be established across key pillars of the digital economy, including connectivity and meaningful use; digital public infrastructure and government services; digital skills and human capital development; digital economy and jobs; online trust and consumer protection; as well as artificial intelligence and emerging technologies.

The clusters will be led by up to 36 professors drawn from Nigerian universities, working alongside international academic partners, with more than 200 researchers, including postdoctoral fellows and PhD candidates, expected to generate policy-relevant research.

“For me, the goal goes beyond research output. We are looking for better policies that lead to stronger institutions and a more prosperous society,” the minister said.

He described the initiative as one of the ministry’s most meaningful programmes, noting that it is intended to produce ideas that will outlast any single administration. “Because nations that lead the future are not simply those that deploy infrastructure; they are the ones that cultivate ideas,” he said.

The ministry invited academic and research institutions interested in participating to review the Terms of Reference released alongside the EOI and submit proposals to lead or collaborate within the national research clusters.

It added that a press conference would be held in the coming week to provide further details and engagement opportunities for vice-chancellors and research institutions across the country.

 


Kindly share this post
Continue Reading

Telecom

NCC Cracks Down: Telcos to Refund Users for Network Disruptions

Published

on

Kindly share this post

Nigerian Communications Commission (NCC) has directed Mobile Network Operators (MNOs) to compensate subscribers experiencing poor network service across the country.

NCC Cracks Down: Telcos to Refund Users for Network Disruptions

The Commission said the directive was part of efforts to ensure that consumers are not made to bear the burden of service failures when operators fall short of required standards.

Under the new regulation, telecom operators will be required to provide compensation directly to affected subscribers for breaches of Quality of Service (QoS) Key Performance Indicators (KPIs).

According to the NCC, the compensation will be issued in the form of airtime credits, calculated based on subscribers’ average usage and their presence within specific Local Government Areas where service disruptions occur.

The Commission emphasised that telecommunications services remain critical to economic activities, social interactions, and access to digital opportunities, noting that poor service delivery negatively impacts productivity and public confidence.

It explained that while regulatory fines have traditionally been used to sanction operators, the new approach prioritises consumer protection and strengthens accountability within the telecommunications sector.

The NCC added that the measure would complement existing efforts to monitor service quality and enforce compliance with performance standards.

In addition, the Commission directed tower companies responsible for telecom infrastructure, such as network masts, to reinvest fines imposed on them into infrastructure upgrades with measurable outcomes.

The regulator reiterated its commitment to ensuring that operators invest in network resilience, expand capacity, and improve infrastructure to meet growing demand.

It also pledged to continue deploying regulatory mechanisms that promote fairness, transparency, and accountability across the industry, while ensuring that subscribers receive the quality of service they deserve.


Kindly share this post
Continue Reading

Trending