On 60 Minutes, security expert Karsten Nohl eavesdrops on cellphone calls and texts knowing just the phone's number by hacking SS7, a global carrier protocol
Hacking Your Phone — Sharyn Alfonsi reports on how cellphones and mobile phone networks are vulnerable to hacking
Context & Ripple Effects
Karsten Nohl's on-air SS7 eavesdropping demo for 60 Minutes is the public coming-out of a flaw researchers had already documented: the critical vulnerabilities in the SS7 telephony protocol surfaced in late 2014 with tested techniques to decrypt calls and texts. What the broadcast adds is proof of low barrier — a phone number alone suffices — which converts an academic finding into a mainstream security story.
The segment also lands mid-arc rather than at its start: Wired's guide to SS7 and its exploitation followed weeks later, and the years after showed the attack moving from demonstration to monetization — intercepted two-factor codes draining bank accounts, hijacked numbers emptying crypto wallets, and mass theft of call records from more than ten carriers worldwide.
First-order effects
- Any subscriber whose number an attacker knows becomes interceptable — calls, texts, and location — because the vulnerability sits in carrier signaling infrastructure no individual phone can patch.
- Carriers face immediate pressure to restrict who can query SS7, since the same access that enables lawful interconnection enables eavesdropping by anyone who reaches the signaling network.
Second-order effects
- SMS-based two-factor authentication loses credibility as a control: once attackers can read texts, banks and wallet services relying on SMS codes inherit SS7's weakness, as the later banking and cryptocurrency exploits demonstrated.
- Regulators are forced into the open — the FCC's continued reliance on telecom industry advice left SS7 flawed decades after its design, so each public exploit raises the political cost of deferring to carriers on network security.
Third-order effects
- If SMS keeps degrading as an authentication channel, the industry's structural answer is out-of-band verification — app-based tokens or hardware keys — shifting trust from the carrier network to endpoints and identity providers.
- SS7 points to a broader pattern: protocols built when only a few state-linked operators touched the network become attack surfaces once access broadens, making legacy signaling security a permanent regulatory and competitive issue for carriers.
The trend: Core telephony infrastructure designed for a closed club of operators is being repriced as a public attack surface, pushing authentication away from carrier-controlled channels like SMS.