The U.S. Secret Service has pulled the plug on one of the largest illegal telecom operations uncovered on American soil, dismantling a sprawling network of servers and SIM cards scattered across the New York City metro area. Officials say the takedown, announced Tuesday, neutralized a system with the capacity to disrupt cell networks, cloak criminal communications, and even threaten the safety of senior government officials.
According to the Secret Service, the operation uncovered more than 300 SIM servers and 100,000 SIM cards across multiple sites. Investigators revealed that the network had been used to send anonymous telephonic threats to U.S. leaders, and warned that its capabilities extended far beyond harassment.
“This network of devices had the potential to disrupt telecommunications across the country,” Secret Service Director Sean Curran said. “The threat cannot be overstated.”
Inside the World of SIM Farms
At the heart of the bust was what cybersecurity experts call a SIM farm — a system designed to house and rotate through thousands of SIM cards. Normally, a SIM card stores a subscriber’s identity and encryption keys, allowing a phone to connect securely to a mobile network. But when stacked into servers by the hundreds or thousands, these cards can be weaponized.
“SIM farms are often used for bulk messaging, robocalls, and phishing attacks,” explained Austin Berglas, global head of professional services at BlueVoyant and a former FBI assistant special agent. “By constantly rotating SIM cards, attackers can send hundreds of thousands of messages while avoiding detection and shutdown by service providers.”
Beyond nuisance robocalls, these systems can serve more sinister purposes:
-
Coordinating anonymous, encrypted communications between criminal enterprises and nation-state operatives.
-
Flooding mobile towers with connection attempts to disable service in an area.
-
Generating fake online accounts to spread misinformation or phishing links at scale.
-
Masking threatening communications behind anonymized infrastructure.
With proximity to the United Nations, investigators warned that the New York network could have been leveraged to interfere with sensitive diplomatic communications or amplify disinformation campaigns.
A Threat to Critical Infrastructure
Experts say the implications of the takedown go far beyond spam calls. SIM farms can be used to disrupt the lifelines of public safety.
“With SIM servers controlling banks of SIMs, you can generate many attempts to connect to a tower and overwhelm it,” said Marty Puranik, founder of cloud provider Atlantic.Net. “If you overwhelm the towers, people lose access to voice, text, and data service.”
That means emergency responders, police, and hospitals could be left in the dark during a crisis. Kern Smith, VP at mobile security company Zimperium, warned that adversaries targeting mobile networks are effectively targeting the backbone of modern society. “It’s not just about communications anymore,” he said. “It’s about undermining public safety.”
A Lower Barrier to Entry
The discovery also highlights how affordable mobile-hacking technology has become. Roger Grimes, a CISO advisor at KnowBe4, noted that equipment once costing tens of thousands of dollars is now widely available.
“What used to be a barrier to entry for nation-states is now within reach of everyday criminals,” he said. Portable devices that mimic cell towers, once the domain of intelligence agencies, can be bought used for just a few hundred dollars.
That accessibility raises the stakes for law enforcement, as both sophisticated adversaries and low-level actors now have the tools to compromise mobile infrastructure.
Scale and Sophistication
Still, experts agree that the dismantled New York operation was no amateur setup. With hundreds of servers and over 100,000 SIM cards in play, the network required serious funding and coordination.
“This is a large, expensive, and complex installation,” said John Strand of Strand Consulting. “Just getting 100,000 SIM cards and activating them is a big deal.”
Trey Ford of Bugcrowd added that the takedown was well-timed, given its potential proximity to the U.N. General Assembly. “Focused disruption and potential data capture at that scale represent a high-value takedown,” he said.
Jason Hogg, executive chairman of cybersecurity firm Cypfer and a former FBI agent, called the case an example of the convergence of digital and physical infrastructure. “This operation illustrates the lengths adversaries will go to in order to disrupt telecommunications, which are core to our national security,” he said. “We need a paradigm shift in how we defend critical infrastructure.”
Mobile Networks: The New Cyber Battleground
For years, cybersecurity has focused on protecting computers and enterprise networks. But experts warn that the mobile ecosystem — the devices in our pockets and the towers that keep them connected — has become the next frontier for attackers.
“This bust shows we’ve hit a new level in mobile threats,” said Rocky Cole, COO of iVerify. “One hundred thousand SIM cards able to send tens of millions of anonymous SMS messages per minute represent a clear threat to both mobile infrastructure and enterprises trying to protect their employees.”
Cole noted that nation-state activity increasingly targets mobile devices because of the valuable intelligence they hold. Groups linked to China, including Salt Typhoon and Volt Typhoon, have already been caught exploiting telecom networks.
What Comes Next
The Secret Service’s takedown may have neutralized one dangerous network, but it also underscores the fragility of mobile infrastructure nationwide. As the tools for exploitation become cheaper and more accessible, experts say the U.S. must treat mobile systems with the same priority as energy grids, transportation, and other critical infrastructure.
In the words of Zimperium’s Smith, “Mobile isn’t just a convenience anymore. It is critical infrastructure, and we need to defend it as such.”
