Circles Spy Tools Sold to Repressive Regimes

🔑 Enhanced Key Takeaways

•Circles is a corporate affiliate of Israel's NSO Group, having been acquired by U.S. private equity firm Francisco Partners in 2014 and subsequently merged with NSO Group.
•The company's surveillance technology operates by exploiting vulnerabilities in Signalling System No. 7 (SS7), a core protocol of the global mobile phone system, to intercept communications and track devices.
•The Citizen Lab identified Circles' technology deployed in at least 25 countries worldwide, encompassing both democratic nations and those with documented histories of human rights abuses.
•Unlike NSO Group's Pegasus spyware, Circles' SS7 exploitation method does not leave an obvious digital signature on the target's mobile phone, making it harder to detect.
•Circles offers its customers two deployment options: a system that integrates directly with local telecommunications infrastructure or a 'Circles Cloud' service that connects with telcos globally.

🛠️ Technical Deep Dive

Exploitation Method: Circles' primary method involves exploiting weaknesses in Signalling System No. 7 (SS7), a protocol suite used for routing phone calls and exchanging information between telecommunications companies.
SS7 Vulnerability: The SS7 protocol lacks robust authentication, allowing attackers to send fraudulent commands to a target's home network, falsely indicating that the subscriber is roaming.
Capabilities:
- Location Tracking: Enables tracking of a target's mobile device location, even when they are traveling internationally.
- Call Interception: Allows for the interception and eavesdropping on voice calls.
- SMS Interception: Facilitates the interception of SMS text messages, including those used for two-factor authentication.
Deployment Options:
- Customers can acquire a system for direct connection to their local telecommunications companies' infrastructure.
- Alternatively, a 'Circles Cloud' system is available, designed to interconnect with telecommunications companies worldwide.
Detection: The SS7 mechanism used by Circles does not leave an obvious signature on the target's phone. However, researchers like Citizen Lab have identified Circles deployments through internet scanning for unique signatures associated with Check Point firewalls used in their infrastructure.
Network Susceptibility: The U.S. Department of Homeland Security has indicated that all U.S. wireless networks are vulnerable to SS7 weaknesses, with a majority of global networks facing similar risks. SS7 is predominantly used in 2G and 3G networks.

🔮 Future ImplicationsAI analysis grounded in cited sources

Telecommunications companies will face increased pressure to secure legacy SS7 infrastructure.

The ongoing revelations about SS7 exploitation by companies like Circles highlight critical, long-standing vulnerabilities that could compel regulatory bodies and telcos to invest more heavily in detection and mitigation measures.

There will be enhanced scrutiny and potential regulation of the global surveillance technology market.

Continued reports from human rights organizations and researchers regarding the misuse of surveillance tools by repressive regimes are likely to intensify calls for stricter international export controls and greater accountability for vendors.

Surveillance firms may develop more sophisticated and harder-to-detect methods as SS7 vulnerabilities become more widely known.

As public awareness and potential mitigation efforts against SS7 exploitation increase, surveillance companies are likely to innovate and pivot to new, less detectable exploits to maintain their operational capabilities.

⏳ Timeline

2008

Circles reportedly founded.

2014

Circles acquired by Francisco Partners for $130 million and merged with NSO Group.

2015

Circles' 3G interception and global mobile geolocation services are noted in intelligence reports.

2020-12

The Citizen Lab publishes 'Running in Circles,' a report detailing Circles' SS7 exploitation and identifying deployments in 25 countries.

2026-06-18

Human Rights Watch reviews documents showing Bulgaria granted licenses to Circles for surveillance technology exports to countries with human rights abuse records.

Circles Spy Tools Sold to Repressive Regimes

⚡ 30-Second TL;DR

🧠 Deep Insight

🔑 Enhanced Key Takeaways

🛠️ Technical Deep Dive

🔮 Future ImplicationsAI analysis grounded in cited sources

⏳ Timeline

📎 Sources (10)

👉Related Updates

Anthropic Ban Forces Investor Rethink of Political Risk

Mainland Investors Drive 570% Rally in Kingboard Laminates

Korea Rejects Antitrust Settlements for Delivery Apps

Hutong Research on PBOC Policy and Yuan Outlook