Skip to content

Hide Navigation Hide TOC

Circles - S0602 (c6a07c89-a24c-4c7e-9e3e-6153cc595e24)

Circles reportedly takes advantage of Signaling System 7 (SS7) weaknesses, the protocol suite used to route phone calls, to both track the location of mobile devices and intercept voice calls and SMS messages. It can be connected to a telecommunications company’s infrastructure or purchased as a cloud service. Circles has reportedly been linked to the NSO Group.(Citation: CitizenLab Circles)

Cluster A Galaxy A Cluster B Galaxy B Level
Circles - S0602 (c6a07c89-a24c-4c7e-9e3e-6153cc595e24) Malware Impersonate SS7 Nodes - T1430.002 (0f4fb01b-d57a-4375-b7a2-342c9d3248f7) Attack Pattern 1
Impersonate SS7 Nodes - T1430.002 (0f4fb01b-d57a-4375-b7a2-342c9d3248f7) Attack Pattern Location Tracking - T1430 (99e6295e-741b-4857-b6e5-64989eb039b4) Attack Pattern 2