A new report authored by Cathal Mc Daid, VP of Technology at Enea, examines the methods used to determine the location of mobile phone users by the opposing sides in the Russia-Ukraine conflict. As explained in the executive summary:
Tracking of mobile phones has already been implicated in multiple incidents in the war, including the 2022 New Year’s Eve Ukrainian strike on a Russian barracks in Makiivka. However, many of the discussions of these events occur without a full understanding of what is possible and practical. This paper is the first to go into depth on the numerous ways that mobile phones could be tracked on the battlefield. This research is needed as most analysis either focuses on ‘traditional’ military-radio methods, or mobile security-centric ways, and not both.
Mc Daid identifies three main types of location tracking, which he further breaks down into eight sub-types.
Radio Enabled Location Tracking
- Radio Frequency Direction Finding (Passive)
- Radio Frequency Direction Finding (Active/Cellular Assisted)
- Location Retrieval over Radio Network Signaling
Network Enabled Location Tracking
- Core Network Signaling Interface
- Lawful Interception (Targeted and Bulk)
- Mobile Operator Telecom Hacking
Device Enabled Location Tracking
- Mobile App Data Collection
- Mobile Malware/Infected Handset
There are obvious dangers in soldiers and civilians carrying mobile phones that may be used to target their location. Nevertheless, the report observes that phones will continue to be used in proximity to war zones because they serve vital human needs. The report tellingly repeats advice that is given to Ukrainian soldiers:
Soldier, if you want to survive:
- Leave your own SIM card at home.
- The best place to get a SIM card is in the zone of conflict itself.
- If you plan to make a phone call, walk at least 400-500m away from squad positions.
- Don’t walk away alone, take an armed friend with you to cover you.
- The best place to make a phone call is in locations with a lot of civilians, preferably in recently liberated towns.
- Always keep your phone off. Your life depends on it. Grad missiles will hit your whole squad.
- Do not accept refill codes or cards from the locals. The young woman that brought you a refill card from the neighboring village may be working for the enemy. Right now FSB and SBU have to process enormous amounts of data to identify the mobile phones of our own people and of the enemy. Do not make their job easier.
- Watch over your comrades — a friend calls his girlfriend and an hour or so later your position gets shelled or attacked.
- Remember, the enemy could be listening to your conversations regardless of which SIM card or which telecom operator you are using.
There have been various stories of invading Russian forces needing to rely upon mobile phones for communication with their superiors. It has also been reported that Russians have often been forced to steal phones from Ukrainian civilians. These soldiers may not have been aware of how much they put themselves in danger, or were so desperate that they had to do it anyway. Russian forces have also used similar techniques to target Ukrainians. One Russian method involves the dissemination of Android malware so they can locate the tablets used to steer Ukrainian drones. The lessons learned from this conflict need to be understood by other forces too. Even the richest countries may have made insufficient investment in secure communications. As recently as 2019 there were reports that 450 German troops stationed in a NATO mission depended on mobile phones because they lacked secure radio equipment.
Mc Daid’s report is well-written and serves an important purpose. Bad policy decisions often stem from an incomplete understanding of risk and the factors that cause it. Commercial motives may result in a piecemeal or biased analysis taking the place of a comprehensive evaluation of telecoms security threats. Enea and Mc Daid deserve credit for providing policymakers in the armed forces, governments and telcos with a fully-rounded view of the ways that mobile phones can be located so that all the risks are appreciated.
Location Tracking on The Battlefield can be downloaded free of charge and without needing to register from here.
