Although he mentioned how easily cellular location data can be obtained from telecom operators, both legally and illegally, he forgot to mention that mercenary groups continuously obtain cellular location data through SS7/Diameter attacks in a continuous manner rather than using any special exploitation technique. We recently had a case involving tracking a few civilians in different foreign jurisdictions having our agency contracted a specialist company that provided us with cellular location data of the targets on a 24/7 basis. This can be used against any operator in any country, with only one of two pieces of PII required: the IMEI or the phone number (with the second piece always retrieved once the first is looked up).

For more details read https://citizenlab.ca/research/uncovering-global-telecom-exp...