Citizen Lab Research Fellow Lex Gill discusses a recent CBC demonstration on NDP MP Matthew Dubé’s phone, which illustrated how hackers could track his location and record his calls by exploiting international telecommunication networks using SS7.
In May 2025, Keir Giles, a well-known expert on Russian military operations, was targeted with a highly sophisticated and personalized phishing attack. Using a method not previously observed by the Citizen Lab, the attacker posed as a U.S. State Department employee to convince Mr. Giles to create and send app-specific passwords for his email accounts, bypassing multi-factor authentication. Google spotted and blocked the attack, attributing it to a Russian state-backed operator.
