Unencrypted satellites expose global communications

Researchers from UC San Diego and the University of Maryland found that nearly half of geostationary satellites transmit unencrypted data, exposing consumer, corporate and military communications to interception, using an $800 satellite receiver for three years to gather the evidence. They passively listened to signals and, in nine hours, captured over 2,700 phone numbers along with one side of calls and text messages from T-Mobile users.

The study also revealed Telmex was sending unencrypted voice calls and AT&T Mexico was transmitting raw satellite data, including user internet traffic and metadata, with decryption keys identified that could have exposed additional network information. The researchers noted that their work did not involve actively intercepting communications.

Following the findings, some firms such as T-Mobile added encryption, while other U.S. critical infrastructure operators have yet to secure their systems, highlighting an unprecedented scale of satellite surveillance risks, according to the study published in Don’t look up: There are sensitive internal links in the clear on GEO satellites, with the broader implications discussed in coverage that included an assessment reported by Wired.