The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
A university research team used about $800 in commercially available satellite-receiving equipment to passively capture sensitive communications transmitted through some geostationary-orbit (GEO) satellite links. The findings included portions of cellular traffic, in-flight Wi-Fi, corporate and financial data, critical-infrastructure communications, and U.S. and Mexican military or law-enforcement traffic.
But the headline needs an important qualification: the researchers did not show that satellites were hacked or that classified military intelligence was universally broadcast from orbit. The problem was that some organizations sent traffic through satellite transponders without adequate encryption, making the radio transmissions receivable by others within the satellite beam’s coverage area.
The short version
The research, published in connection with the 2025 ACM Conference on Computer and Communications Security, is titled “Don’t Look Up: There Are Sensitive Internal Links in the Clear on GEO Satellites.” Researchers from the University of California, San Diego, and the University of Maryland observed 39 geostationary satellites and 411 transponders during a seven-month observation period, as part of a broader three-year project.
Recommended Free Tools
They built a receiving station on a UC San Diego building using consumer-grade equipment costing approximately $800. The system received and analyzed downlinked radio traffic; it did not take control of satellites, inject commands, disrupt communications, or alter the data.
#1 Best Overall
- High Quality Component: and professional design; Designed with a compass for easier and quicker tuning. Powered by the receiver, nice tool for campers.
- Less Signal Loss:Built-in amplifier compensates insertion loss.We offer one year warranty and 24 hours customers survice~
- Useful Tool|:Connect to your LNB and receiver to the satellite finder to track the clearest setting for the satellite you wish to tune to.
- Easy To Use:With electronic buzzer, easy operation, audio tone and LCD display with backlight to show the satellite signal intensity.
- No External Power or batteries required: power supplied from your satellite receiver.
The researchers’ project summary says roughly half of the satellite signals in their studied sample carried sensitive information without adequate protection. That does not mean half of all satellites in orbit were exposing secrets. It describes an estimate from a limited sample of the GEO communications environment.
Read the researchers’ project summary and technical explanation.
What information was exposed?
The observed traffic varied widely. Some transmissions contained readable content, while others exposed metadata, identifiers, routing information, or operational details. Some traffic remained encrypted or could not be decrypted.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →| Category | Examples reported by researchers | What exposure could mean |
|---|---|---|
| Cellular backhaul | Calls, SMS messages, internet traffic, subscriber or device identifiers, and cellular communication keys | Readable communications in some cases, plus phone numbers and network metadata |
| Military and government | VoIP and internet traffic, vessel tracking, surveillance information, and law-enforcement communications | Sensitive operational information, even where some related traffic was encrypted |
| Aviation | Passenger browsing-related traffic and aircraft-network information | Potential exposure of user activity or aircraft-network details |
| Corporate and financial | Emails, login credentials, inventory information, and ATM-network data | Account compromise, espionage, fraud, or network reconnaissance |
| Critical infrastructure | Communications associated with electric utilities, oil and gas operations, SCADA-related systems, and repair workflows | Visibility into industrial operations, sites, schedules, and maintenance activity |
These categories come from the researchers’ own summary at satcom.sysnet.ucsd.edu. The findings should not be read as proof that every organization in any listed sector transmitted all of its data in cleartext.
Were actual military secrets exposed?
Sensitive military and law-enforcement traffic was reportedly received, but the available evidence does not establish that classified strategic intelligence or military command systems were broadly exposed.
The researchers reported seeing U.S. and Mexican military or law-enforcement communications, including information associated with military vessels. They said some of the traffic enabled them to infer vessel identities and operational details. That can be highly sensitive: knowing where a vessel is, which network it uses, or when it communicates may create intelligence and safety risks even if no classified document is involved.
However, “military secrets” is a headline-friendly description rather than a precise classification of everything observed. The study distinguishes between unencrypted traffic, exposed metadata, and military-related communications that remained encrypted. It does not demonstrate that all military satellite communications were readable or that researchers obtained weapons-system command codes or classified strategic plans.
Rank #2
- AUTOMATIC SATELLITE ACQUISITION: Self-pointing portable antenna locates DISH satellites in minutes without manual pointing. Designed for RV and mobile use, the antenna locks onto signal quickly and maintains stable HD reception.
- WATCH TWO CHANNELS SIMULTANEOUSLY: Independent viewing capability allows two compatible DISH receivers to operate simultaneously. This makes it easy to watch different channels on separate TVs.
- RUGGED OUTDOOR CONSTRUCTION: Engineered for field-ready durability with a weather-resistant housing to withstand road travel and extended outdoor exposure. Compact dome design measures approximately 14.3” in diameter and 13.5” in height.
- BROAD DISH COMPATIBILITY: Works with DISH Wally and select ViP receivers for seamless integration into existing satellite setups. Compatible with pay-as-you-go programming, which is great for RVs, tailgating, and camping.
- TRUSTED U.S.-BASED DESIGN: Built on decades of Winegard technology expertise, delivering dependable performance, and U.S.-based servers for privacy and security, eliminating foreign monitoring concerns.
The accurate conclusion is that some military and government communications sent through GEO links were insufficiently protected against passive reception.
Did researchers hack the satellites?
No. Nothing in the cited research indicates a satellite takeover, intrusion into satellite control systems, signal disruption, or alteration of communications.
A GEO satellite commonly acts as a relay. A ground station sends a signal upward, the satellite transponder receives and retransmits it, and a remote site—such as a cell tower, aircraft, ship, utility installation, or industrial facility—receives it. The satellite does not necessarily know whether the underlying data is private, sensitive, or public.
Free tools Windows power users keep installed
One-click scans. No signup required.
Because radio transmissions cover a large footprint, another receiver inside that footprint may also receive the signal. If the data is not encrypted, the receiver may be able to interpret some or all of it. The researchers described coverage areas that could reach as much as 40% of Earth’s surface for a single transponder, depending on the satellite, beam, frequency, and receiving location. That is a coverage estimate, not a claim that every signal could be collected across 40% of the planet.
This is best understood as passive interception of inadequately protected network traffic, not as hacking a satellite.
Why does a satellite link behave like a broadcast?
Organizations often think of a satellite connection as a private logical link between two sites. Physically, however, the radio portion of that link may be receivable across a broad area. Privacy therefore depends on encryption, not on the assumption that the signal is difficult to find.
Rank #3
- Starlink provides reliable high-speed, low-latency, internet wherever you live
- Service plan required, activate STARLINK by selecting a service plan that is customized to meet your personal needs
- Select from plans suited for households or travel
- Get online in minutes, set up STARLINK with just 2-steps, plug it in and point at the sky
- STARLINK comes with everything needed to get online including a kickstand, gen 3-router, cables and power supply
Legacy satellite networks can also involve several separate parties: a satellite operator, a telecommunications carrier, a remote-site provider, a network integrator, and the organization whose data is being transported. Each may secure one part of the path while leaving another segment exposed.
Possible reasons for cleartext traffic include the cost and complexity of encryption, old infrastructure, fragmented responsibility, uncertainty about whether traffic uses satellite backhaul, and misplaced confidence that the beam’s geographic footprint provides sufficient secrecy.
The central security lesson is simple: obscurity of a transmission path is not encryption.
The telecom finding involving more than 2,700 phone numbers
In one nine-hour recording session, the researchers collected phone numbers associated with more than 2,700 T-Mobile users and obtained the contents of communications traveling in one direction through an affected satellite backhaul link.
That does not mean every T-Mobile customer was compromised, nor that researchers reconstructed both sides of every call or message. The reported exposure involved particular traffic routes and remote infrastructure that used the affected satellite links.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11The researchers also observed unencrypted traffic associated with AT&T Mexico and Telmex, according to the university and project materials. Coverage of the T-Mobile finding is available from WIRED and UC San Diego’s Center for Networked Systems.
Does “unencrypted satellite traffic” mean everything was readable?
No. “Unencrypted” can describe different levels of exposure:
Rank #4
- Bundle Includes: STARLINK - Mini Kit AC Dual Band Wi-Fi System - White
- FAST SATELLITE INTERNET ANYWHERE: Access high-speed, low-latency internet even in and rural areas using the global Starlink satellite network. Designed by SpaceX, the Starlink Mini Kit provides dependable connectivity without wired infrastructure, making it ideal for travel, camping, work, off-grid cabins, RV setups, and locations with no traditional broadband options.
- COMPACT AND PORTABLE DESIGN: The Starlink Mini is small enough to carry in a backpack yet powerful enough for daily use. Its portable, all-in-one design includes an integrated Wi-Fi router, DC power input, and rugged housing suitable for on-the-go applications. Whether at a campsite, construction site, or temporary location, Starlink Mini offers quick deployment and reliable performance.
- EASY TWO-STEP SETUP: Get online in minutes—simply plug in the Mini, point it at the sky, and connect. The kit includes everything needed for installation, including a kickstand, pipe adapter, power cable, and power supply. Use the Starlink app to find a clear sky view, check obstructions, explore mounting options, and manage your Starlink account and hardware settings.
- BUILT-IN ROUTER WITH WI-FI 5: The Starlink Mini includes an integrated dual-band Wi-Fi 5 router for strong wireless coverage and stable speeds. A built-in ethernet port provides wired connectivity for routers, mesh systems, gaming devices, or network hardware. Average power consumption of 25–40 watts supports efficient operation in off-grid or mobile power setups.
- Cleartext payload: The content of a message, email, call, or network session may be directly readable.
- Exposed metadata: Phone numbers, device identifiers, timing, locations, destinations, routing information, or network names may be visible even when content is protected.
- Partial protection: An application may encrypt its content while another part of the connection—such as signaling or backhaul—remains exposed.
- Encrypted traffic: Some communications observed by the researchers could not be decrypted.
For example, HTTPS can protect the contents of a website session without hiding every detail about when a device connected or which service it contacted. A VPN or IPsec tunnel can protect broader traffic across the satellite segment, but only if it is correctly configured and its endpoints cover the entire path that needs protection.
Metadata can be consequential on its own. It may reveal the existence and timing of communications, vessel or aircraft locations, industrial schedules, network topology, or the presence of a particular organization on a satellite beam.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Is satellite internet generally unsafe?
This study does not justify a blanket claim that all satellite internet is insecure. Its focus was primarily on GEO communications and satellite backhaul links, not every modern low-Earth-orbit broadband service.
Security depends on the provider, protocols, customer equipment, encryption layers, key management, and network architecture. A provider may encrypt its own transport, while a customer or third-party carrier may still expose traffic on another segment. Conversely, a customer’s end-to-end encryption may protect data even if the underlying satellite link is observable.
The relevant question is not simply “Does this organization use satellites?” It is: Which exact network segments carry sensitive data, and what protects each segment?
What happened after the researchers reported the issue?
The team notified affected organizations and government entities before publication. The University of Maryland reported that lawyers advised the researchers to stop monitoring the affected telecom provider and preserve the collected data.
UC San Diego reported that T-Mobile and Walmart subsequently encrypted their satellite data. T-Mobile separately said it added Session Initiation Protocol encryption for U.S. customers to protect signaling traffic, including call setup, dialed numbers, and text-message content as it travels between handsets and the network core.
Best Value
- Precisely align your dish so the strongest signal is sent to your receiver with this pocket-sized Finder
- This Finder makes tuning into C-band, Ku-band, and Digital a breeze for the best picture
- Includes high sensitive tone function – tone changes as the signal strength increases
- Equipped with meter to display dbu and powered directly via satellite receiver
Those actions are important, but they do not establish that the entire satellite industry—or every affected transponder and provider—has been fixed. The researchers examined only part of the GEO environment, and the problem involves multiple sectors and network operators.
What organizations should do now
Organizations that use satellite, wireless, aircraft, maritime, or remote-site backhaul should treat the radio link as potentially observable and verify protection across the complete path.
- Inventory every link. Identify satellite-connected cell sites, branches, aircraft systems, vessels, utilities, industrial facilities, backup links, and third-party carrier paths.
- Map the data. Determine whether authentication, management traffic, telemetry, VoIP, operational technology, SCADA-related data, and customer payloads cross each link.
- Use layered encryption. Apply end-to-end encryption where possible, and use IPsec, VPNs, or provider-level link encryption where they provide meaningful coverage.
- Protect management and metadata. Do not encrypt only the obvious content while leaving credentials, identifiers, routing data, locations, or operational schedules exposed.
- Remove cleartext protocols. Replace legacy authentication and unencrypted administrative services, especially on remote and industrial networks.
- Segment critical systems. Keep operational technology and SCADA environments separated from general corporate and passenger networks.
- Rotate potentially exposed secrets. Change credentials and keys that may have crossed an unprotected link, following incident-response procedures.
- Review vendors contractually. Require satellite operators, carriers, aircraft providers, and network integrators to document encryption at every network segment.
- Test independently. Use an authorized security assessor to verify what traffic is observable, without conducting unauthorized interception.
Encryption introduces processing overhead, compatibility issues, latency, availability concerns, and key-management work. Those trade-offs are real, particularly for legacy industrial or embedded systems. They do not make an observable cleartext satellite path an acceptable default for sensitive information.
What this discovery really means
The most important finding is architectural rather than sensational. Sensitive data was sometimes treated as private because it traveled through a specialized satellite network, even though the physical transmission could be received over a very large area.
The research shows why satellite operators, carriers, governments, utilities, airlines, financial companies, and telecommunications providers must secure the links between their systems—not merely their central networks. It also shows why operational metadata can matter as much as message content.
Some named organizations took corrective action after disclosure. But the study does not prove that all GEO satellite traffic is protected today. For any organization relying on satellite backhaul, the defensible assumption is that the radio path may be observable and must be secured accordingly.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minute
