A newly identified hacking group dubbed SilentAir took control of mobile carrier equipment and intercepted calls and text messages, mainly targeting users in Taiwan, SecurityWeek reported on Thursday.
The report said telecom software and security company Enia was confident SilentAir is a new state-level group. It may be linked to China, but confidence is low. Even so, SilentAir targeted Taiwan and did not target China. The timing of the attacks also matched working hours in China’s time zone.
SilentAir carried out attacks using equipment it had taken over at telecom operators. Operators exchange routing messages that tell them where calls and texts should go, and the hackers manipulated those messages. They redirected calls and texts sent to targets to hacked equipment and stole subscriber information. They also sent “silent texts” that do not appear on screen, apparently to check whether interception had succeeded.
Enia has tracked the attacks since early 2025. An investigation found there had been suspicious activity even before that.
SilentAir took control of telecom operator equipment in at least six Asian countries. Beyond Taiwan, it also targeted more than 10 other countries and regions, and it also singled out people in East Africa, Central Asia, the Middle East and Europe. Targets included key political and government figures.