Telecom
Hackers Could Decrypt Your GSM Phone Call
Researchers have discovered a flaw in the GSM standard used by AT&T and T-Mobile that would allow hackers to listen in.
Researchers from BlackBerry at DefCon security conference in Las Vegas, USA, presented an attack that can intercept GSM calls as they’re transmitted over the air and decrypt them to listen back to what was said.
And the vulnerability has been around for decades.
Most mobile calls around the world are made over the Global System for Mobile Communications standard; in the US, GSM underpins any call made over AT&T or T-Mobile’s network.
Regular GSM calls aren’t fully end-to-end encrypted for maximum protection, but they are encrypted at many steps along their path, so random people can’t just tune into phone calls over the air like radio stations.
The researchers found, though, that they can target the encryption algorithms used to protect calls and listen in on basically anything.
“GSM is a well documented and analyzed standard, but it’s an aging standard and it’s had a pretty typical cybersecurity journey,” says Campbell Murray, the global head of delivery for BlackBerry Cybersecurity.
“The weaknesses we found are in any GSM implementation up to 5G. Regardless of which GSM implementation you’re using there is a flaw historically created and engineered that you’re exposing.”
The problem is in the encryption key exchange that establishes a secure connection between a phone and a nearby cell tower every time you initiate a call.
This exchange gives both your device and the tower the keys to unlock the data that is about to be encrypted. In analyzing this interaction, the researchers realized that the way the GSM documentation is written, there are flaws in the error control mechanisms governing how the keys are encoded. This makes the keys vulnerable to a cracking attack.
“It’s a really good example of how the intention is there to create security, but the security engineering process behind that implementation failed.”
As a result, a hacker could set up equipment to intercept call connections in a given area, capture the key exchanges between phones and cellular base stations, digitally record the calls in their unintelligible, encrypted form, crack the keys, and then use them to decrypt the calls.
The findings analyze two of GSM’s proprietary cryptographic algorithms that are widely used in call encryption—A5/1 and A5/3.
The researchers found that they can crack the keys in most implementations of A5/1 within about an hour. For A5/3 the attack is theoretically possible, but it would take many years to actually crack the keys.
“We spent a lot of time looking at the standards and reading the implementations and reverse engineering what the key exchange process looks like,” BlackBerry’s Murray said.
“You can see how people believed that this was a good solution. It’s a really good example of how the intention is there to create security, but the security engineering process behind that implementation failed.”
The researchers emphasize that because GSM is such an old and thoroughly analyzed standard, there are already other known attacks against it that are easier to carry out in practice, like using malicious base stations, often called stingrays, to intercept calls or track a cellphone’s location.
Additional research into the A5 family of ciphers over the years has turned up other flaws as well. And there are ways to configure the key exchange encryption that would make it more difficult for attackers to crack the keys. But Murray says that the theoretical risk always remains.
Short of totally overhauling the GSM encryption scheme, which seems unlikely, the documentation for implementing A5/1 and A5/3 could be revised to make key interception and cracking attacks even more impractical. The researchers say that they are in the early phases of discussing the work with the standards body GSMA.
The trade association said in a statement to WIRED that, “Details have not been submitted to the GSMA under our coordinated vulnerability (CVD) programme. When the technical details are known to the GSMA’s Fraud and Security Group we will be better placed to consider the implications and the necessary mitigation actions.”
Though it may not be that surprising at this point that GSM has security issues, it’s still the cellular protocol used by the vast majority of the world. And as long as it’s around, real call privacy issues remain, too.
Airtel Nigeria has restated its commitment to transparency, customer safety, and regulatory collaboration following recent regulatory enforcement by the Nigerian Communications Commission (NCC).
The NCC had served Airtel Nigeria a notice of sanction over some alleged SIM infractions in Kano State and consequently slammed a fine of N104 million on the telecommunications firm.
NCC had in a letter, addressed to Airtel Nigeria Chief Executive Officer, dated May 26, 2025, signed by Chizua Whyte, head, Legal and Regulatory Services, and Mohammed Dari, acting head, Compliance Monitoring and Enforcement, on behalf of Dr Aminu Maida, executive vice chairman, NCC, titled: ‘Notice of Sanction: Non-Compliance with SIM Registration Directive in Kano,’ where the infractions were spelt out.
According to NCC, Airtel infractions include unauthorised SIM registrations using 198 unapproved devices, resulting in 8,275 registrations outside the 281 verified Airtel shops; premature activation of 63 MSISDNs prior to proper SIM registration, contrary to the provisions of the Registration of Communications Subscribers Regulations 2022; failure to conduct effective eyeballing, leading to 407 fraudulent SIM registrations with multiple NINs, contrary to the provision of the Registration of Communications Subscribers Regulations 2022 and failure to provide satisfactory explanation for SIM registrations conducted between 12.00 a.m and 6.00 a.m.
On the matter, the letter revealed that there were some letter exchanges and subsequent meetings on the infractions between the telecom regulator and Airtel, starting from January 12, 2025, March 19, 2025, March 24, 2025, and March 27, 2025, respectively.
Apparently, after investigations and responses from Airtel, the NCC was not satisfied and this led to the fine of N104 million, which was to be paid within seven days from the date the letter was issued.
Specifically, NCC fined Airtel N5 million, N12 million, N81.4 million and N5 million for the infractions respectively.
Reacting, Airtel, expressed appreciation to the NCC for uncovering the infractions, describing the development as a critical opportunity to strengthen internal processes and further align with national security and regulatory expectations
“We thank the NCC for its vigilance and continued support in protecting the integrity of the telecoms ecosystem. Airtel takes these findings seriously and is already implementing corrective measures,” a spokesperson for the company said.
Only recently, Airtel Nigeria’s CEO recently announced that the company is doubling its investment in the country, focusing on network expansion, fiber-to-the-street rollout, 4G/5G deployment, customer care upgrades, and digital infrastructure security.
These investments reinforce Airtel’s long-term vision of building a resilient and forward-looking telecom network that meets the evolving needs of Nigerians.
“Our systems are constantly evolving to stay ahead of scammers and malicious actors,” the spokesperson added. “This is not just about compliance; it’s about our responsibility to the millions of Nigerians who rely on Airtel daily.”
Airtel Nigeria says it will continue to work closely with the NCC and other arms of government to ensure high standards of service and safety for all telecom users nationwide.
Kenya is celebrating its regulatory ecosystem being ranked as the most progressive in Africa. The International Telecommunications Union (ITU) has ranked the East African country first in its most recent ICT Regulatory Tracker.
ITU’s ICT Regulatory Tracker is an evidence-gathering tool for decision-makers and regulators. It demonstrates the effectiveness of regulatory systems in the age of technology.
The ITU evaluates the design of the national regulatory authority, the scope of the regulatory mandate, the obtaining regulatory environment, and the robustness of the competition framework in member countries.
Kenya received 93 points, up from 92 in 2023, and now leads the continent in best practices for ICT regulations.
Nigeria and South Africa finished second and third, with 92 and 88 points respectively. Malawi, Egypt, Rwanda, Morocco, Uganda, Burkina Faso, and Senegal complete the top 10 list.
Globally, Kenya was ranked 20th out of 194 countries covered.Italy led the rankings, with 100 points.
The regulator, Communications Authority (CA) of Kenya, said the achievement underscored Kenya’s commitment to creating a robust, technology-neutral regulatory environment that supports innovation, affordability and access.
Steve Isaboke, permanent secretary for broadcasting and telecommunications, visited CA Centre in Nairobi following the announcement on Thursday.
“The ranking is a clear testament of the excellent work that CA has done in spearheading Kenya’s digital transformation and driving digital access for all,” he said.
“After 25 years, CA’s regulatory regime has attained maturity, and gained global recognition. This ranking shows that the CA staff and leadership are executing their work diligently.”
MTN Nigeria Communications PLC has announced a significant increase in female representation within its leadership, with women now making up 41.4% of its workforce, a notable rise from 38.7% in 2023.
This figure reportedly doubles the industry average, positioning MTN Nigeria as a frontrunner in gender diversity within Nigeria’s ICT sector.
The company’s recently released 2024 Annual Report highlights its sustained commitment to workplace inclusion and gender equality, aligning with its “Ambition 2025” strategy. Female representation within the executive management team has reached approximately 46.7%.
MTN Nigeria attributes this progress to dedicated initiatives aimed at empowering women professionally. These include the “Women in Tech” programme, which provides targeted upskilling in high-demand fields such as Cloud Computing, Software Engineering, AI/ML, Data Science, and Cyber Security.
The “MTN Y’ello Mums Internship Programme” also supports young mothers in their transition back into the corporate world after career breaks.
Odunayo Sanya, executive director of the MTN Foundation, was recognised as the CSI Personality of the Year at the Nigeria Tech Innovation & Telecoms Awards (NTITA), further underscoring the company’s impactful social initiatives.
Additionally, Uto Ukpanah, the company secretary, received the inaugural Global Corporate Secretary of the Year Award from the Corporate Secretaries International Association (CSIA).
Speaking at a recent conference, Odunayo Sanya, emphasised the importance of balancing profitability and sustainability equation, saying, “Businesses today need to be purpose-driven. While the soul of business is profitability, it is not profitability alone that should matter to stakeholders.”
Uto Ukpanah, added, “Showcasing our corporate values and ethos to the world opens the door for greater collaboration with other organisations, as we believe there’s a lot to learn when we all come together. Governance continues to evolve. The challenges today are not the same as they were 10 years ago. Greater accountability is expected, and companies can only continue to do better.”
The company’s broader efforts in diversity and inclusion have been acknowledged with multiple accolades, including the Corporate Responsibility Award. MTN Nigeria also received the “Employer of the Year” award at the 4th Edition of the Nigeria Employers’ Consultative Association (NECA) Employers’ Excellence Awards.
Karl Toriola, CEO of MTN Nigeria, in the report, reiterated the company’s commitment to building a purpose-driven organisation, emphasising that its success is intrinsically linked to its people and their dedication to a shared vision.
“Since we initiated our culture transformation journey in 2021, our culture transformation has significantly enhanced employee engagement and organisational cohesion. It’s directly strengthened our ability to deliver outstanding business performance and drive sustainable long-term value for all our stakeholders.”
Gambaryan, Binance Executive Leaves Company after 8-Month Detention in Nigeria
NITDA Makes Case for Inclusive Tech for Special Needs
Airtel Recommits to Fraud Prevention after NCC’s N104m Fine for SIM Registration Breaches
IHS Nigeria Reaffirms Commitment to raising Nigeria’s Next Tech Giants from the Ilorin Innovation Hub
Kenya Beats Nigeria As the Most Progressive ICT Regulation in Africa
Telecom3 days agoTelcos Threaten to Disconnect Banks over Misinformation on New USSD Charges
Telecom3 days agoMTN Nigeria Plans N900Bn in Service Upgrade
General News3 days agoJumia Marks 13 Years of E-Commerce Innovation and Impact in Nigeria
Telecom3 days agoTelecom Regulators in Africa Chart New Course for a Data-driven Future
Broadcasting3 days agoNetflix Hikes Subscription Fees Again in Nigeria over “Market Conditions”
News3 days agoAbbas Jega, Ex-AMCON ED, Testifies, Says Arik Never Cooperated With AMCON
Broadcasting3 days agoNBC, Nigcomsat Launch Satellite Plan to Transform Broadcasting
E-Financial3 days agoNDIC Calls for Inputs to IADI Core Principles for Effective Deposit Insurance