CitizenLab-Bad-Connection-2026.md

This Citizen Lab investigation documents two coordinated, long-running telecom surveillance campaigns that abused global signalling systems (SS7/Diameter) and SIM toolkit exploits to track and exfiltrate location data across many countries; investigators mapped operator identifiers, routing paths, and specific signalling/global title indicators implicating persistent, sophisticated commercial or state-linked surveillance operations affecting thousands of events.