Back to all lessons
Awareness Lessons
last week

Stingray Warrants Used to Track Journalists and Activists

US law enforcement's use of cell-site simulators (Stingrays) to surveil journalists and political candidates raises serious concerns about the chilling effect on press freedom and civil liberties. These devices operate as dragnet surveillance tools, intercepting communications from all nearby devices — not just the target — making innocent bystanders collateral victims of the surveillance. The fact that warrants were sought against journalists for covering a lawful protest signals a potential misuse of surveillance technology to monitor constitutionally protected activity. This matters because even legally obtained surveillance tools, when deployed broadly, can undermine the public's trust in government and expose sensitive source relationships that journalists depend on.

Tactical Insight

Immediate actions for journalists and activists

  • Use end-to-end encrypted communication apps (e.g., Signal) to protect sources and sensitive communications from interception.
  • Enable airplane mode or use a faraday bag when attending sensitive events to prevent cell-site simulator tracking.
  • Audit and minimize the personal data stored on mobile devices used in the field.

Long-term organizational improvements

  • Establish a digital security policy for media organizations that includes device hardening, VPN use, and regular security training for staff.
  • Advocate for and comply with legal frameworks that require public disclosure and strict oversight of cell-site simulator deployments.
  • Implement operational security (OPSEC) training programs for journalists, activists, and political candidates handling sensitive information.

Detection and awareness measures

  • Deploy mobile threat defense (MTD) tools capable of detecting anomalous basestation behavior indicative of IMSI catchers.
  • Monitor legal and legislative developments around surveillance warrant requirements to ensure organizational readiness and compliance.
  • Conduct regular threat modeling exercises to identify surveillance risks specific to high-profile reporting or advocacy work.

Back this up with a control

All controls and vendors

Training helps people spot this. These controls make the attack fail even on the day someone does not.