First Wap Surveillance Company Exposed in Global Phone Tracking Data Leak
By
mattboulos
Hand-rolled, kettle-boiled, baked to perfection. Worth every minute at the bakery.
Summary
An investigative report reveals that Lighthouse discovered a massive archive of phone tracking data from surveillance company First Wap, containing thousands of phone numbers and hundreds of thousands of locations from nearly every country. First Wap, headquartered in Jakarta but run by European executives, has built a global phone tracking operation. The data represents the largest known leak of successful individual targeting through telecom network surveillance, exposing the reach and tactics of this mercenary surveillance company.
Key quotes
· 4 pulledLighthouse found a vast archive of data on the deep web containing thousands of phone numbers and hundreds of thousands of locations from nearly every country in the world.
First Wap has quietly built a phone tracking empire spanning the globe.
None of them has included this amount of successful targeting of individuals.
From telecom protocols to a 1.5 million row dataset, here's how we uncovered the reach and tactics of a mercenary phone-tracking company.
You might also wanna read
Flock Safety Exposed ArcGIS API Key Across 53 Public Assets, Compromising Surveillance Infrastructure
A security researcher discovered that Flock Safety, a surveillance technology company, had hardcoded a default ArcGIS API key across 53 publ
Phishing Campaign Targets Signal Users by Stealing Backup Recovery Keys
A new wave of phishing attacks is targeting Signal users by impersonating the app's support team. Hackers send messages inside Signal claimi
cybersecuritynews.com·4h ago
New phishing campaign targets Signal users to steal chat backup recovery keys
Hackers are targeting Signal users in a new phishing campaign that attempts to steal their chat backups. The attackers pose as Signal's supp
techcrunch.com·4h ago
Weekly cybersecurity roundup: FortiClient EMS infostealer, Trend Micro Apex One exploit, and crypto payment security
A weekly roundup of cybersecurity news, featuring an interview with Coinflow's CISO about crypto payment security under AI-driven threats, c
helpnetsecurity.com·6h ago
CISA Adds Palo Alto Networks PAN-OS Authentication Bypass Vulnerability to Known Exploited Vulnerabilities Catalog
CISA has added a new vulnerability (CVE-2026-0257) to its Known Exploited Vulnerabilities (KEV) Catalog, affecting Palo Alto Networks PAN-OS
cisa.gov·9h agoCISA Adds Palo Alto Networks PAN-OS Authentication Bypass Vulnerability to Known Exploited Vulnerabilities Catalog
CISA has added a new vulnerability (CVE-2026-0257) to its Known Exploited Vulnerabilities (KEV) Catalog, affecting Palo Alto Networks PAN-OS
cisa.gov·9h ago