Anas SahelIdentity & security

Threat watch / Threat actors

SilentAir

State-linked updated 14 Nov 2026

The name telecom security company Enea gives to an actor that sends SS7 and Diameter signalling attacks from compromised nodes inside mobile operators in at least six Asian countries, to divert selected subscribers' calls and texts, with Taiwan as its primary target.

Attribution

Enea assesses with high confidence that SilentAir is a state-level actor, and with low confidence that its activity aligns with China-nexus cyber operations. It calls a link with the LIMINAL PANDA group possible but unconfirmed. [1]

Incidents in the watch

  1. SilentAir: hacked mobile operators used to divert texts and catch 2FA codes, Taiwan the main target High

← All threat actors