US and UK intelligence agencies have reportedly hacked into the computer network of giant SIM card maker Gemalto and taken smartphone encryption keys potentially used by customers of hundreds of mobile phone carriers worldwide.
The Gemalto hack, by the US National Security Agency and the UK Government Communications Headquarters (GCHQ), allowed the two spy agencies to monitor a large portion of the world’s mobile phone voice and data traffic, according to a story in The Intercept.
The hack was detailed in a 2010 GCHQ document leaked by former NSA contractor Edward Snowden, the story said.
It’s unclear how much mobile traffic the two agencies intercepted after the reported hack.
Gemalto, based in the Netherlands, produces about 2 billion SIM cards a year which are used by about 450 mobile carriers worldwide.
With the compromised encryption keys, the surveillance agencies would be able to monitor mobile communications without the approval of the carriers or foreign governments, The Intercept story said. The encryption keys would allow the agencies to intercept mobile traffic without court-ordered warrants or wiretaps, the story said.
Representatives of the NSA and Gemalto did not immediately respond to requests for comments on the story.
Gemalto was unaware of the penetration of its systems, the company told The Intercept. The company is “disturbed” about the possibility, Paul Beverly, a Gemalto executive vice president, told the publication.
GCHQ compromised Gemalto’s computer networks and installed malware on several computers, The Intercept story said, quoting a slide from the UK intelligence agency provided by Snowden. At the time GCHQ believed it had access to the company’s “entire network,” the slide said.
GCHQ also said it had access to billing servers of mobile carriers, allowing it to manipulate customer charges in an effort to hide surveillance on phones, the story said.
IDG News Service
Subscribers 0
Fans 0
Followers 0
Followers